Advisories · Technology

Shahjada Download Manager.

Every CVE that names Shahjada Download Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-94405 CVE record

CVSS 5.3 Medium

WordPress Download Manager plugin <= 3.3.71 - Sensitive Data Exposure vulnerability
- Shahjada Download Manager
- Broken access control
Not analysed yet 2 Oct 2026
CVE-2026-39676 CVE record

CVSS 5.3 Medium

WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability
- Shahjada Download Manager
- Broken access control
Not analysed yet 8 Apr 2026
CVE-2026-39615 CVE record

CVSS 5.9 Medium

WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability
- Shahjada Download Manager
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2026
CVE-2025-63070 CVE record

CVSS 4.3 Medium

WordPress Download Manager plugin <= 3.3.32 - Sensitive Data Exposure vulnerability
- Shahjada Download Manager
- Information disclosure
Not analysed yet 9 Dec 2025
CVE-2025-60093 CVE record

CVSS 4.3 Medium

WordPress Download Manager Plugin <= 3.3.24 - Cross Site Request Forgery (CSRF) Vulnerability
- Shahjada Download Manager
- Cross-site request forgery (CSRF)
Not analysed yet 26 Sept 2025
CVE-2025-60092 CVE record

CVSS 5.3 Medium

WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability
- Shahjada Download Manager
- Information disclosure
Not analysed yet 26 Sept 2025
CVE-2024-56217 CVE record

CVSS 4.3 Medium

WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability
- Shahjada Download Manager
- Broken access control
Not analysed yet 31 Dec 2024