WP-DownloadManager vulnerabilities

2 known vulnerabilities in WP-DownloadManager from Gamerz. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WP-DownloadManager: Unrestricted Upload of File with Dangerous Type

  CVE-2025-10747Sep 26, 2025Gamerz

  The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download-add.php file in all versions up to, and including, 1.68.11. This makes it possible for authenticated attackers, with Adminis

• 7.2 High severity

  WP-DownloadManager: Absolute Path Traversal

  CVE-2025-4799Jun 11, 2025GamerzEPSS 1.01%

  The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to, and including, 1.68.10. This makes it possible for authenticated attackers, with