Wp-downloadmanager vulnerabilities
We track 1 vulnerability in Wp-downloadmanager products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Wp-downloadmanager vulnerabilities
- 7.2 High severity
wp-downloadmanager: Unrestricted Upload of File with Dangerous Type
The wp-downloadmanager WordPress plugin, in version 1.68.11 (also affecting the 6.9.4 release line), allows an admin-privileged user (current_user_can('manage_downloads')) to upload arbitrary files via download-add.php with no extension or MIME-type validation