W3 Eden, Inc.

12 CVEs across 6 W3 Eden, Inc. products. Browse W3 Eden, Inc. vulnerabilities, severities, and proof-of-concept exploits.

W3 Eden, Inc. products with known CVEs

ProductCVEs
WordPress Download Manager4
Download Manager3
Download Manager (WordPress Plugin)3
Premium Packages1
Pricing Table (WordPress Plugin)1
W3 Eden, Inc. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-32131Medium5.32024-05-17Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Downlo…
CVE-2024-29924High7.12024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Premium Packages allows Reflected XSS.This…
CVE-2024-29114Medium6.52024-03-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This iss…
CVE-2022-45836Medium6.32023-04-18Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.
CVE-2022-36288Medium5.42022-08-23Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.
CVE-2022-34658Medium5.42022-08-23Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.
CVE-2022-34347Medium4.22022-08-22Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.
CVE-2021-36896Medium4.82022-04-11Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2
CVE-2021-34639High7.52021-08-05Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. "payload.p…
CVE-2021-34638Medium6.52021-08-05Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file info…
CVE-2017-2217Medium6.12017-07-07Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct…
CVE-2017-2216Medium6.12017-07-07Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via uns…