CD
Product
CM Download Manager
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 4Low 0
Watch
Add CM Download Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1962 | 8.8 | Mar 25 | CM Download and File Manager < 2.9.1 - Download Edit via CSRF Affected: before 2.9.1 |
| CVE-2020-24146 | 8.1 | Jul 7 | Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial… Affected: 2.7.0 |
| CVE-2022-3076 | 7.2 | Sep 26 | The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting,… Affected: before 2.8.6 |
Showing 3