CveMateVulnerability intelligence

W3 Eden Inc. vulnerabilities

12 vulnerabilities

Known vulnerabilities in W3 Eden Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.

Products

5

Wordpress Download Manager4 vulnerabilities
Download Manager3 vulnerabilities
Download Manager (Wordpress Plugin)3 vulnerabilities
Premium Packages1 vulnerabilities
Pricing Table (Wordpress Plugin)1 vulnerabilities

CVE-2021-36896w3 eden, inc.pricing table (wordpress plugin)+24y ago11-04-2022 19:36

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2 CVE-2021-34638w3 eden, inc.wordpress download manager+25y ago05-08-2021 20:18

Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file information, as well as allowing Author+ users to perform XSS attacks, by setting Download template to a file containing configuration information or an uploaded JavaScript with an image extension This issue affects: WordPress Download Manager version 3.1.24 and prior versions.CVE-2021-34639w3 eden, inc.wordpress download manager+25y ago05-08-2021 20:18

Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. "payload.php.png" which is executable in some configurations. This issue affects: WordPress Download Manager version 3.1.24 and prior versions.CVE-2022-36288w3 eden, inc.download manager (wordpress plugin)+24y ago23-08-2022 15:47

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.CVE-2022-45836w3 eden inc.download manager+23y ago18-04-2023 13:58

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.CVE-2022-34347w3 eden, inc.download manager (wordpress plugin)+24y ago22-08-2022 14:47

Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.CVE-2022-34658w3 eden, inc.download manager (wordpress plugin)+24y ago23-08-2022 15:46

Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.CVE-2017-2216w3 eden, inc.wordpress download manager+29y ago07-07-2017 13:00

Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2017-2217w3 eden, inc.wordpress download manager+29y ago07-07-2017 13:00

Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.CVE-2024-29114w3 eden inc.download manager+22y ago19-03-2024 14:58

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Download Manager allows Stored XSS.This issue affects Download Manager: from n/a through 3.2.84.CVE-2024-29924w3 eden, inc.premium packages+12y ago27-03-2024 07:23

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden, Inc. Premium Packages allows Reflected XSS.This issue affects Premium Packages: from n/a through 5.8.2.CVE-2024-32131w3 eden inc.download manager+22y ago17-05-2024 08:18

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Download Manager: from n/a through 3.2.82.