CM Download Manager vulnerabilities

2 known vulnerabilities in CM Download Manager from CreativeMindsSolutions. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  CM Download Manager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-30910Apr 1, 2025CreativeMindsSolutions

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CreativeMindsSolutions CM Download Manager cm-download-manager allows Path Traversal.This issue affects CM Download Manager: from n/a through <= 2.9.6.

• 8.8 High severity

  CM Download Manager: Cross-Site Request Forgery

  CVE-2024-1962Mar 25, 2024CM Download Manager

  The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack