Skip to content
OpenAdvisories

Vendor

gamerz

10 known vulnerabilities.

Products

WP-DownloadManager 5 WP-UserOnline 2 WP-Polls 1 WP-Stats 1 WP-PostRatings 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-19794 Public exploit

    WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting

    The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.56 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web …

    gamerz WP-Stats Web / CMS
  • High 7.2
    CVE-2025-10747

    WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload

    The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download-add.php file in all versions up to, and including, 1.68.11. This makes it possible for authenticated attackers, with Admini…

    gamerz WP-DownloadManager Web / CMS
  • High 7.2
    CVE-2025-4799

    WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion

    The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to, and including, 1.68.10. This makes it possible for authenticated attackers, with…

    gamerz WP-DownloadManager Web / CMS