Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Download Manager Pro
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-86609 | 1 Wordpress-extensions | 1 Download Manager Pro | 2026-09-28 | 8.8 High |
| The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its email-locked download subscription form before outputting it back in an admin page, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against administrators. This affects the commercial Pro edition only; the free Download Manager WordPress plugin before 7.5.6 published under the same slug does not ship the affected feature. | ||||
Page 1 of 1.