Cminds Cm Download Manager
8 CVEs affecting Cminds Cm Download Manager. Latest disclosed: 2024-03-25. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1962 | High | 8.8 | 2024-03-25 | The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit down… |
CVE-2020-24146 | High | 8.1 | 2021-07-07 | Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possi… |
CVE-2022-3076 | High | 7.2 | 2022-09-26 | The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the… |
CVE-2024-1231 | Medium | 6.8 | 2024-03-25 | The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish… |
CVE-2020-24145 | Medium | 6.1 | 2021-07-07 | Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attackers to inject arbi… |
CVE-2020-27344 | Medium | 6.1 | 2020-10-21 | The cm-download-manager plugin before 2.8.0 for WordPress allows XSS. |
CVE-2024-1232 | Medium | 4.8 | 2024-03-25 | The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete do… |
CVE-2014-9129 | | 2014-12-05 | Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack t… |