Medium · 4.8 CVE-2021-44760 EUVD-2021-31575GHSA-c4h7-gw5q-vr23

WordPress WP-DownloadManager plugin <= 1.68.6 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability

Published Mar 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 versions.

Vendor	Product	Affected	Fixed
Lester 'GaMerZ' Chan	WP-DownloadManager (WordPress plugin)	≤ 1.68.6	—