Approved changes feed: RSS · Atom

cpe:2.3:a:creativemindssolutions:cm_download_manager:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorCreativemindssolutions (f7222e7b-b519-5ad4-b066-3dcd3dd3d11b)
ProductCm Download Manager (c951e7ac-c305-5970-acde-366c29d36c90)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1962 vulnerable 2026-06-03 14:54:35.089067 CM Download and File Manager < 2.9.1 - Download Edit via CSRF
The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack
Published: 2024-03-25T05:00:02.022Z
Updated: 2024-08-28T13:58:15.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1232 vulnerable 2026-06-03 14:54:26.523933 CM Download Manager < 2.9.0 - Download Deletion via CSRF
The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete downloads via a CSRF attack
Published: 2024-03-25T05:00:01.133Z
Updated: 2024-08-09T20:00:16.433Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.