Skip to content
OpenAdvisories

Vendor

W3 Eden

13 known vulnerabilities.

Products

WordPress Download Manager 4 Download Manager 3 Download Manager (WordPress plugin) 3 WPDM – Premium Packages 1 Pricing Table (WordPress plugin) 1 Premium Packages 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-32131

    WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Download Manager: from n/a through 3.2.82.

    W3 Eden Download Manager
  • Medium 6.5
    CVE-2024-29114

    WordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This issue affects Download Manager: from n/a through 3.2.84.

    W3 Eden Download Manager
  • Medium 5.4
    CVE-2022-36288

    WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

    W3 Eden Download Manager (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-34658

    WordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

    W3 Eden Download Manager (WordPress plugin) Web / CMS
  • Medium 4.2
    CVE-2022-34347

    WordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

    W3 Eden Download Manager (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2021-36896

    WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2

    W3 Eden Pricing Table (WordPress plugin) Web / CMS
  • Medium 6.5
    CVE-2021-34638

    WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal

    Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file information, as well as allowing Author+ users to perform XSS attacks, by setting Download template to a…

    W3 Eden WordPress Download Manager Web / CMS