Known Vulnerabilities for products from W3eden

Listed below are 18 of the newest known vulnerabilities associated with the vendor "W3eden".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2024-56217 json Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Ac... Not Provided 2024-12-31 2026-04-23
CVE-2024-29114 json Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Download ... Not Provided 2024-03-19 2026-04-28
CVE-2024-5266 json The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpdm_user_dashboard, wpdm_pack... Not Provided 2024-06-12 2026-04-08
CVE-2024-4160 json The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm-all-packages' s... Not Provided 2024-05-31 2026-04-08
CVE-2024-2098 json The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check... Not Provided 2024-06-13 2026-04-08
CVE-2024-1766 json The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a user's Display Name in all versi... Not Provided 2024-06-12 2026-04-08
CVE-2023-6954 json The Download Manager Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in a... Not Provided 2024-03-13 2026-04-08
CVE-2023-6785 json The Download Manager plugin for WordPress is vulnerable to unauthorized file download of files added via the plugin in all ve... Not Provided 2024-03-13 2026-04-08
CVE-2023-2305 json The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdm_members', 'wpdm_login_fo... Not Provided 2023-06-09 2026-04-08
CVE-2022-45836 json Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions. Not Provided 2023-04-18 2026-04-28
CVE-2022-34658 json Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugi... 5.4 - MEDIUM 2022-08-23 2022-08-25
CVE-2022-2436 json The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'file[package_dir]' par... Not Provided 2022-09-06 2026-04-08
CVE-2022-2101 json The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file[files][]` parameter in v... Not Provided 2022-07-18 2026-04-08
CVE-2022-1985 json The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and including 3.... Not Provided 2022-06-13 2026-04-08
CVE-2021-36896 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 4.8 - MEDIUM 2022-04-11 2022-04-15
CVE-2017-18497 json The liveforms plugin before 3.4.0 for WordPress has XSS. 6.1 - MEDIUM 2019-08-13 2019-08-15
CVE-2015-9301 json The liveforms plugin before 3.2.0 for WordPress has SQL injection. 9.8 - CRITICAL 2019-08-13 2019-09-09
CVE-2013-7319 json Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to... Not Provided 2014-02-06 2026-04-29

Known software with vulnerabilities from W3eden

Type Vendor Product Version
ApplicationW3edenLive Forms-