Skip to content
OpenAdvisories

Vendor

W3 Eden

13 known vulnerabilities.

W3 Eden at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202610
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

WordPress Download Manager 4 Download Manager 3 Download Manager (WordPress plugin) 3 WPDM – Premium Packages 1 Pricing Table (WordPress plugin) 1 Premium Packages 1
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • High 7.1
    CVE-2026-73190

    WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden WPDM – Premium Packages wpdm-premium-packages allows DOM-Based XSS.This issue affects WPDM – Premium Packages: from n/a through 7.0.5.

    W3 Eden WPDM – Premium Packages
  • Medium 5.3
    CVE-2024-32131

    WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Download Manager: from n/a through 3.2.82.

    W3 Eden Download Manager
  • High 7.1
    CVE-2024-29924

    WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Premium Packages allows Reflected XSS.This issue affects Premium Packages: from n/a through 5.8.2.

    W3 Eden Premium Packages
  • Medium 6.5
    CVE-2024-29114

    WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This issue affects Download Manager: from n/a through 3.2.84.

    W3 Eden Download Manager
  • High 7.1
    CVE-2022-45836 Scanner template

    WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.

    W3 Eden Download Manager
  • Medium 5.4
    CVE-2022-36288

    WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

    W3 Eden Download Manager (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-34658

    WordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

    W3 Eden Download Manager (WordPress plugin) Web / CMS
  • Medium 4.2
    CVE-2022-34347

    WordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

    W3 Eden Download Manager (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2021-36896

    WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2

    W3 Eden Pricing Table (WordPress plugin) Web / CMS
  • Medium 6.5
    CVE-2021-34638

    WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal

    Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file information, as well as allowing Author+ users to perform XSS attacks, by setting Download template to a…

    W3 Eden WordPress Download Manager Web / CMS
  • High 7.5
    CVE-2021-34639

    WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload

    Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. "payload.php.png" which is executable in some configurations. This issue affects: WordPress Download Manager v…

    W3 Eden WordPress Download Manager Web / CMS
  • Unscored —
    CVE-2017-2217

    Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect u…

    W3 Eden WordPress Download Manager Web / CMS
  • Unscored —
    CVE-2017-2216

    Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inj…

    W3 Eden WordPress Download Manager Web / CMS