Skip to content
OpenAdvisories

Vendor

W3 Eden

13 known vulnerabilities.

Products

WordPress Download Manager 4 Download Manager 3 Download Manager (WordPress plugin) 3 WPDM – Premium Packages 1 Pricing Table (WordPress plugin) 1 Premium Packages 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-73190

    WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden WPDM – Premium Packages wpdm-premium-packages allows DOM-Based XSS.This issue affects WPDM – Premium Packages: from n/a through 7.0.5.

    W3 Eden WPDM – Premium Packages
  • High 7.1
    CVE-2024-29924

    WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Premium Packages allows Reflected XSS.This issue affects Premium Packages: from n/a through 5.8.2.

    W3 Eden Premium Packages
  • High 7.1
    CVE-2022-45836 Scanner template

    WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.

    W3 Eden Download Manager
  • High 7.5
    CVE-2021-34639

    WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload

    Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. "payload.php.png" which is executable in some configurations. This issue affects: WordPress Download Manager v…

    W3 Eden WordPress Download Manager Web / CMS