agentprime: codename065-download-managerEvery new CVE for codename065-download-manager.https://agentprime.io/CVE-2026-12054: Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' Parameterhttps://agentprime.io/advisories/CVE-2026-12054/https://agentprime.io/advisories/CVE-2026-12054/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:31:07 GMTCVECVE-2026-9696: Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcodehttps://agentprime.io/advisories/CVE-2026-9696/https://agentprime.io/advisories/CVE-2026-9696/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 04:26:47 GMTCVECVE-2026-103964: Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Emailhttps://agentprime.io/advisories/CVE-2026-103964/https://agentprime.io/advisories/CVE-2026-103964/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 04:26:45 GMTCVECVE-2026-102401: Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-102401/https://agentprime.io/advisories/CVE-2026-102401/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 04:26:44 GMTCVECVE-2026-97338: Download Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Namehttps://agentprime.io/advisories/CVE-2026-97338/https://agentprime.io/advisories/CVE-2026-97338/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:39:28 GMTCVECVE-2026-92714: Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' Parameterhttps://agentprime.io/advisories/CVE-2026-92714/https://agentprime.io/advisories/CVE-2026-92714/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 06:38:52 GMTCVECVE-2026-16685: Download Manager <= 3.3.66 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-16685/https://agentprime.io/advisories/CVE-2026-16685/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 07:49:48 GMTCVECVE-2026-14343: Download Manager <= 3.3.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_before' and 'note_after' Shortcode Attributeshttps://agentprime.io/advisories/CVE-2026-14343/https://agentprime.io/advisories/CVE-2026-14343/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 06:52:45 GMTCVECVE-2026-13733: Download Manager <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-13733/https://agentprime.io/advisories/CVE-2026-13733/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 07:53:38 GMTCVECVE-2026-4057: Download Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection Removalhttps://agentprime.io/advisories/CVE-2026-4057/https://agentprime.io/advisories/CVE-2026-4057/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 01:24:58 GMTCVECVE-2026-5357: Download Manager <= 3.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeshttps://agentprime.io/advisories/CVE-2026-5357/https://agentprime.io/advisories/CVE-2026-5357/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 02:25:05 GMTCVECVE-2026-2571: Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' Parameterhttps://agentprime.io/advisories/CVE-2026-2571/https://agentprime.io/advisories/CVE-2026-2571/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Mar 2026 06:46:15 GMTCVECVE-2026-1666: Download Manager <= 3.3.46 - Reflected Cross-Site Scripting via 'redirect_to' Parameterhttps://agentprime.io/advisories/CVE-2026-1666/https://agentprime.io/advisories/CVE-2026-1666/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 06:42:40 GMTCVECVE-2025-15364: Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePasswordhttps://agentprime.io/advisories/CVE-2025-15364/https://agentprime.io/advisories/CVE-2025-15364/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Jan 2026 01:50:12 GMTCVECVE-2025-13498: Download Manager <= 3.3.32 - Missing Authorization to Authenticated (Subscriber+) Media Attachment Password Disclosurehttps://agentprime.io/advisories/CVE-2025-13498/https://agentprime.io/advisories/CVE-2025-13498/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 07:20:46 GMTCVECVE-2025-12177: Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Keyhttps://agentprime.io/advisories/CVE-2025-12177/https://agentprime.io/advisories/CVE-2025-12177/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 08 Nov 2025 03:27:45 GMTCVECVE-2025-10146: Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameterhttps://agentprime.io/advisories/CVE-2025-10146/https://agentprime.io/advisories/CVE-2025-10146/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Sep 2025 04:27:04 GMTCVECVE-2025-4367: Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcodehttps://agentprime.io/advisories/CVE-2025-4367/https://agentprime.io/advisories/CVE-2025-4367/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jun 2025 03:40:13 GMTCVECVE-2025-3404: Download Manager <= 3.3.12 - Authenticated (Author+) Arbitrary File Deletionhttps://agentprime.io/advisories/CVE-2025-3404/https://agentprime.io/advisories/CVE-2025-3404/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Apr 2025 07:23:39 GMTCVECVE-2025-3056: Download Manager <= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadhttps://agentprime.io/advisories/CVE-2025-3056/https://agentprime.io/advisories/CVE-2025-3056/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Apr 2025 08:21:37 GMTCVECVE-2025-1785: Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwritehttps://agentprime.io/advisories/CVE-2025-1785/https://agentprime.io/advisories/CVE-2025-1785/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Mar 2025 07:31:39 GMTCVECVE-2024-11768: Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Fileshttps://agentprime.io/advisories/CVE-2024-11768/https://agentprime.io/advisories/CVE-2024-11768/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Dec 2024 05:24:56 GMTCVECVE-2024-11740: Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Executionhttps://agentprime.io/advisories/CVE-2024-11740/https://agentprime.io/advisories/CVE-2024-11740/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Dec 2024 05:24:55 GMTCVECVE-2024-6208: Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2024-6208/https://agentprime.io/advisories/CVE-2024-6208/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Jul 2024 12:43:17 GMTCVECVE-2024-2098: Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibraryhttps://agentprime.io/advisories/CVE-2024-2098/https://agentprime.io/advisories/CVE-2024-2098/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Jun 2024 05:34:44 GMTCVECVE-2024-1766: Download Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-1766/https://agentprime.io/advisories/CVE-2024-1766/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 11:05:08 GMTCVECVE-2024-5266: Download Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodeshttps://agentprime.io/advisories/CVE-2024-5266/https://agentprime.io/advisories/CVE-2024-5266/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 08:33:18 GMTCVECVE-2024-4001: Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcodehttps://agentprime.io/advisories/CVE-2024-4001/https://agentprime.io/advisories/CVE-2024-4001/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jun 2024 11:01:58 GMTCVECVE-2024-4160: Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcodehttps://agentprime.io/advisories/CVE-2024-4160/https://agentprime.io/advisories/CVE-2024-4160/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 May 2024 09:31:39 GMTCVECVE-2023-6785: Download Manager <= 3.2.84 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2023-6785/https://agentprime.io/advisories/CVE-2023-6785/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 15:26:58 GMTCVECVE-2023-6954: Download Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2023-6954/https://agentprime.io/advisories/CVE-2023-6954/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 15:26:51 GMTCVECVE-2023-2305: Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2023-2305/https://agentprime.io/advisories/CVE-2023-2305/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:25 GMTCVECVE-2022-2436: Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserializationhttps://agentprime.io/advisories/CVE-2022-2436/https://agentprime.io/advisories/CVE-2022-2436/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Sep 2022 17:18:57 GMTCVECVE-2022-2101: Download Manager <= 3.2.46 - Contributor+ Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2022-2101/https://agentprime.io/advisories/CVE-2022-2101/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Jul 2022 16:13:21 GMTCVECVE-2022-1985: Download Manager <= 3.2.42 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2022-1985/https://agentprime.io/advisories/CVE-2022-1985/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jun 2022 12:44:35 GMTCVE