Download Manager

Unauthenticated Cron Trigger due to Hardcoded Cron Key vulnerability <= 3.3.30

5.3

2 days ago

Cross Site Request Forgery (CSRF) Vulnerability <= 3.3.24

4.3

26 September, 2025

Sensitive Data Exposure Vulnerability <= 3.3.25

5.3

26 September, 2025

Reflected CrossSite Scripting via `user_ids` Parameter vulnerability <= 3.3.23

7.1

18 September, 2025

Authenticated (Author+) Stored Crosssite Scripting via wpdm_user_dashboard Shortcode vulnerability <= 3.3.18

5.9

19 June, 2025