Advisories · Technology

W3 Eden, Inc. WordPress Download Manager.

Every CVE that names W3 Eden, Inc. WordPress Download Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-34638 CVE record

CVSS 6.5 Medium

WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal
- W3 Eden, Inc. WordPress Download Manager
- Path traversal
- Cross-site scripting (XSS)
Not analysed yet 5 Aug 2021
CVE-2021-34639 CVE record

CVSS 7.5 High

WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload
- W3 Eden, Inc. WordPress Download Manager
- CWE-646
Not analysed yet 5 Aug 2021
CVE-2017-2217 CVE record

W3 Eden, Inc. WordPress Download Manager: Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows…
- W3 Eden, Inc. WordPress Download Manager
Not analysed yet 7 Jul 2017
CVE-2017-2216 CVE record

W3 Eden, Inc. WordPress Download Manager: Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50…
- W3 Eden, Inc. WordPress Download Manager
Not analysed yet 7 Jul 2017