Vulnerabilities in W3 Eden, Inc.

11 results

CVE-2017-2217—Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary webEPSS 1.5%CVE-2017-2216—Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web scrEPSS 1.4%CVE-2021-34638MEDIUMWordPress Download Manager <= 3.1.24 Authenticated Directory TraversalEPSS 1.3%CVE-2022-45836HIGHWordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)EPSS 0.7%CVE-2021-34639HIGHWordPress Download Manager <= 3.1.24 Authenticated Arbitrary File UploadEPSS 0.6%CVE-2021-36896MEDIUMWordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.6%CVE-2022-34658MEDIUMWordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitiesEPSS 0.4%CVE-2024-29924HIGHWordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-29114MEDIUMWordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2022-34347MEDIUMWordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%CVE-2022-36288MEDIUMWordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesEPSS 0.3%