Skip to content
OpenAdvisories

Vendor

Lester Chan

4 known vulnerabilities.

Products

WP-Polls 1 WP-DownloadManager 1 WP-ShowHide 1 WP-Stats 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-66426

    WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.

    Lester Chan WP-Stats
  • High 7.1
    CVE-2024-47341

    WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lester Chan WP-DownloadManager wp-downloadmanager allows Reflected XSS.This issue affects WP-DownloadManager: from n/a through <= 1.68.8.

    Lester Chan WP-DownloadManager