Known Vulnerabilities for products from W3eden
Listed below are 20 of the newest known vulnerabilities associated with the vendor "W3eden".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2024-56217 json | Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Ac... | Not Provided | 2024-12-31 | 2026-04-23 |
| CVE-2024-29114 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Download ... | Not Provided | 2024-03-19 | 2026-04-28 |
| CVE-2024-5266 json | The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpdm_user_dashboard, wpdm_pack... | Not Provided | 2024-06-12 | 2026-04-08 |
| CVE-2024-4160 json | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm-all-packages' s... | Not Provided | 2024-05-31 | 2026-04-08 |
| CVE-2024-2098 json | The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check... | Not Provided | 2024-06-13 | 2026-04-08 |
| CVE-2024-1766 json | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a user's Display Name in all versi... | Not Provided | 2024-06-12 | 2026-04-08 |
| CVE-2023-6954 json | The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in a... | Not Provided | 2024-03-13 | 2026-04-08 |
| CVE-2023-6785 json | The Download Manager plugin for WordPress is vulnerable to unauthorized file download of files added via the plugin in all ve... | Not Provided | 2024-03-13 | 2026-04-08 |
| CVE-2023-2305 json | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdm_members', 'wpdm_login_fo... | Not Provided | 2023-06-09 | 2026-04-08 |
| CVE-2022-45836 json | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions. | Not Provided | 2023-04-18 | 2026-04-28 |
| CVE-2022-34658 json | Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugi... | 5.4 - MEDIUM | 2022-08-23 | 2022-08-25 |
| CVE-2022-2436 json | The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'file[package_dir]' par... | Not Provided | 2022-09-06 | 2026-04-08 |
| CVE-2022-2101 json | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file[files][]` parameter in v... | Not Provided | 2022-07-18 | 2026-04-08 |
| CVE-2022-1985 json | The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and including 3.... | Not Provided | 2022-06-13 | 2026-04-08 |
| CVE-2021-36896 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 4.8 - MEDIUM | 2022-04-11 | 2022-04-15 |
| CVE-2017-18497 json | The liveforms plugin before 3.4.0 for WordPress has XSS. | 6.1 - MEDIUM | 2019-08-13 | 2019-08-15 |
| CVE-2015-9301 json | The liveforms plugin before 3.2.0 for WordPress has SQL injection. | 9.8 - CRITICAL | 2019-08-13 | 2019-09-09 |
| CVE-2014-9260 json | The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to up... | Not Provided | 2017-08-07 | 2025-04-20 |
| CVE-2014-8585 json | Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbi... | Not Provided | 2014-11-04 | 2026-05-06 |
| CVE-2013-7319 json | Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to... | Not Provided | 2014-02-06 | 2026-04-29 |
Known software with vulnerabilities from W3eden
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | W3eden | Live Forms | - |