Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 102
Reset filtersWordPress Download Manager <= 3.2.12 - Cross-Site Request Forgery
WordPress Download Manager <= 3.1.24 - Cross-Site Scripting
WordPress Download Manager <= 3.1.24 - Authenticated File Upload
WordPress Download Manager < 3.1.19 - Arbitrary File Upload
WordPress Download Manager < 3.1.23 - Arbitrary Asset Manager Usage
WordPress Download Manager < 3.1.22 - Cross-Site Request Forgery
Download Manager <= 3.1.17 - Missing Authorization
CM Download Manager < 2.8.0 - Directory Traversal to Arbitrary File Deletion and Denial of Service
CM Download Manager <= 2.7.0 - Cross-Site Scripting
CM Download Manager <= 2.7.0 - Authenticated Stored Cross-Site Scripting
WordPress Download Manager <= 2.9.96 - Cross-Site Scripting
WordPress Download Manager <= 2.9.93 - Cross-Site Scripting
WordPress Download Manager <= 2.9.6 - Cross-Site Request Forgery
WordPress Download Manager < 2.9.51 - Open Redirect
WordPress Download Manager <= 2.9.51 - Cross-Site Scripting
WordPress Download Manager <= 2.9.49 - Reflected Cross-Site Scripting
WordPress Download Manager <= 2.9.45 - Cross-Site Request Forgery
Download Manager <= 2.8.7 - Missing Authorization
Download Manager <= 2.8.7 - Privilege Escalation
Download Manager <= 2.8.7 - Sensitive Information Disclosure via Directory Listing
WordPress Download Manager <= 2.7.94 - Stored Cross-Site Scripting
WordPress Download Manager <= 2.7.4 - Remote Code Execution
CM Download Manager <= 2.0.6 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.