W3 Eden, Inc. WordPress Download Manager
4 CVEs affecting W3 Eden, Inc. WordPress Download Manager. Latest disclosed: 2021-08-05. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-34639 | High | 7.5 | 2021-08-05 | Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. "payload.p… |
CVE-2021-34638 | Medium | 6.5 | 2021-08-05 | Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file info… |
CVE-2017-2217 | Medium | 6.1 | 2017-07-07 | Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct… |
CVE-2017-2216 | Medium | 6.1 | 2017-07-07 | Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via uns… |