Vulnerability in Download Manager
CVE-2026-14292
The Download Manager WordPress plugin before 3.3.66 does not properly escape a package's title before outputting it in the front-end package templates, allowing users with the Author role or above to store a title that results in arbitrary…
Affected products
- Unknown Download Manager — versions 0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)