Pricing

WordPress security

Instantly fix and mitigate vulnerabilities

Enterprise API

At scale monitoring and vPatching for hosts

Managed VDP

Start a security program for your plugin

Bug Bounty

Join the community and earn bounties

Plugin auditing

Paid auditing for WordPress vendors

Vulnerability database

The latest WordPress security intelligence
Login
Start trial
WP-DownloadManager Logo

WP-DownloadManager

Plugin

Changelog

Claim

VDP

Developer

Lester Chan

Latest version

1.69

Installations

3,000

Last updated

1 month ago

Vulnerability history

Not fixed 0 present
Fixed 6 patched

DownloadManager plugin <= 1.68.11 Authenticated (Admin+) Arbitrary File Upload vulnerability <= 1.68.11

Patch priority: low Fixed

7.2

25 September, 2025

DownloadManager plugin <= 1.68.10 Authenticated (Administrator+) Arbitrary File Read vulnerability <= 1.68.10

Patch priority: low Fixed

4.9

11 June, 2025

DownloadManager plugin <= 1.68.8 Reflected Cross Site Scripting (XSS) vulnerability <= 1.68.8

Badge Patch priority: medium Fixed

7.1

27 September, 2024

DownloadManager plugin <= 1.68.6 Multiple Authenticated Stored CrossSite Scripting (XSS) vulnerabilities <= 1.68.6

Patch priority: low Fixed

4.8

12 January, 2022

DownloadManager plugin <= 1.68.5 Multiple Authenticated Stored CrossSite Scripting (XSS) vulnerabilities <= 1.68.5

Patch priority: low Fixed

4.8

10 January, 2022

Vulnerability mitigation

Pricing Application security (SCA) RapidMitigateNEW Threat Intelligence (API) Documentation VS Monarx VS Imunify360 VS Wordfence Log in

Code security

Managed VDP Security Suite BETANEW Active VDP directory1023 Security auditing Compliance (CRA)NEW Log inNEW

Bug bounty

Bug bounty Leaderboard Guidelines LearnNEW Report Discord Log inNEW

Use cases

Web developers WebhostsNEW Software vendors WordPress WooCommerce

Resources

Vulnerability database Whitepaper 2025 Articles Case studiesNEW WebinarsNEW Vulnerability statistics

Patchstack

About Careers Merch store Media kit LinkedIn Facebook X
© 2025 Patchstack DPA Privacy Policy Accessibility Terms & Conditions

Vulnerability mitigation

Pricing Application security (SCA) RapidMitigateNEW Threat Intelligence (API) Documentation VS Monarx VS Imunify360 VS Wordfence Log in

Code security

Managed VDP Security Suite BETANEW Active VDP directory1023 Security auditing Compliance (CRA)NEW Log inNEW

Bug bounty

Bug bounty Leaderboard Guidelines LearnNEW Report Discord Log inNEW

Use cases

Web developers WebhostsNEW Software vendors WordPress WooCommerce

Resources

Vulnerability database Whitepaper 2025 Articles Case studiesNEW WebinarsNEW Vulnerability statistics

Patchstack

About Careers Merch store Media kit LinkedIn Facebook X
Mobile Menu

Let us know if we have missed a vulnerability reported elsewhere

Mobile Menu Close

Thank you for contributing!

Close Mobile Menu