Known CVE

WordPress Download Manager <2.9.94 - Cross-Site Scripting

WordPress Download Manager plugin before 2.9.94 contains a cross-site scripting vulnerability via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.

CVE-2019-15889

Medium2019CVSS 6.1CWE-79

cve2019 · packetstorm · wordpress · xss · wp-plugin · wpdownloadmanager · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website