Approved changes feed: RSS · Atom

cpe:2.3:a:creativemindssolutions:cm_download_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCreativemindssolutions (f7222e7b-b519-5ad4-b066-3dcd3dd3d11b)
ProductCm Download Manager (c951e7ac-c305-5970-acde-366c29d36c90)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/cm-download-manager purl2cpe 2026-06-01 10:12:00.722318

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-30910 vulnerable 2026-06-03 15:00:29.820821 WordPress CM Download Manager plugin <= 2.9.6 - Arbitrary File Deletion vulnerability
HIGH (8.6)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CreativeMindsSolutions CM Download Manager cm-download-manager allows Path Traversal.This issue affects CM Download Manager: from n/a through <= 2.9.6.
Published: 2025-04-01T05:31:40.624Z
Updated: 2026-04-28T16:12:00.353Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.