Approved changes feed: RSS · Atom

cpe:2.3:a:lester_chan:wp-downloadmanager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLester Chan (648fe40d-ec1e-5ed6-93bc-85736e1ecb52)
ProductWp Downloadmanager (b5dbff39-7d0c-5a7b-bcf7-c29d08f0b446)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/lesterchan/wp-downloadmanager purl2cpe 2026-06-01 10:14:45.118385
pkg:github/revcrew/wp-downloadmanager purl2cpe 2026-06-01 10:14:45.118387
pkg:github/wp-plugins/wp-downloadmanager purl2cpe 2026-06-01 10:14:45.118388

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47341 vulnerable 2026-06-08 06:48:11.808608 WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lester Chan WP-DownloadManager wp-downloadmanager allows Reflected XSS.This issue affects WP-DownloadManager: from n/a through <= 1.68.8.
Published: 2024-10-06T10:50:13.888Z
Updated: 2026-04-28T16:10:19.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2697 vulnerable 2026-06-08 05:04:27.291606 Details available
Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2013-04-19T10:00:00.000Z
Updated: 2024-09-16T17:48:19.970Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.