Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:lana_downloads_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductLana Downloads Manager (4067335b-f5c5-589e-968c-f71dccfee35e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2048 vulnerable 2026-06-08 07:14:57.830334 Lana Downloads Manager < 1.10.0 - Admin+ Arbitrary File Download via Path Traversal
The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server
Published: 2025-04-01T06:00:05.541Z
Updated: 2025-04-01T14:58:56.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2392 vulnerable 2026-06-08 05:43:35.453839 Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download
The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.
Published: 2022-08-22T15:03:01.000Z
Updated: 2024-08-03T00:39:06.383Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.