Approved changes feed: RSS · Atom

cpe:2.3:a:maennchen1.de:m1.downloadlist:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMaennchen1.De (f25d266f-411d-5c83-b7af-ff5126b95515)
ProductM1.Downloadlist (a61c39ac-760a-523b-8ce7-7fc5542ac45a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32164 vulnerable 2026-06-08 07:18:59.252609 WordPress m1.DownloadList plugin <= 0.24 - Sensitive Data Exposure vulnerability
MEDIUM (6.5)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in maennchen1.de m1.DownloadList m1downloadlist allows Retrieve Embedded Sensitive Data.This issue affects m1.DownloadList: from n/a through <= 0.24.
Published: 2025-04-08T16:59:34.230Z
Updated: 2026-04-28T16:12:17.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26895 vulnerable 2026-06-08 07:14:50.637791 WordPress m1.DownloadList plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maennchen1.de m1.DownloadList m1downloadlist allows DOM-Based XSS.This issue affects m1.DownloadList: from n/a through <= 0.19.
Published: 2025-03-15T21:57:02.171Z
Updated: 2026-04-28T16:11:42.543Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.