Unknown Cm Download Manager vulnerabilities
4 known vulnerabilities affecting unknown/cm_download_manager.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2024-1962HIGHCVSS 8.8fixed in 2.9.12024-03-25
CVE-2024-1962 [HIGH] CWE-352 CVE-2024-1962: The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, whi
The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack
cvelistv5nvd
CVE-2024-1231MEDIUMCVSS 6.8fixed in 2.9.02024-03-25
CVE-2024-1231 [MEDIUM] CWE-352 CVE-2024-1231: The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, whi
The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish downloads via a CSRF attack
cvelistv5nvd
CVE-2024-1232MEDIUMCVSS 4.8fixed in 2.9.02024-03-25
CVE-2024-1232 [MEDIUM] CWE-352 CVE-2024-1232: The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, whi
The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete downloads via a CSRF attack
cvelistv5nvd
CVE-2022-3076HIGHCVSS 7.2≥ 2.8.6, < 2.8.62022-09-26
CVE-2022-3076 [HIGH] CWE-434 CVE-2022-3076: The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to u
The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example.
cvelistv5nvd