Approved changes feed: RSS · Atom

cpe:2.3:a:wpdownloadmanager:download_manager:*:*:*:*:pro:wordpress:*:*

part: a version: * update: *

VendorWpdownloadmanager (a97b6973-e3ec-5672-8253-8ce3599d3534)
ProductDownload Manager (7df91341-735b-544a-b959-55b85bb2e4b4)
Edition*
Language*
Software editionpro
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/download-manager purl2cpe 2026-06-01 10:16:53.351225

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1809 vulnerable 2026-06-08 05:52:37.077637 Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure
The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files.
Published: 2023-05-02T07:04:53.506Z
Updated: 2025-01-30T14:47:05.448Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.