Login Request a demo
DP
Product
Download Plugin
by metagauss · last CVE Jul 4, 2025
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Download Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-36345
8.8
0%
May 28
WordPress Download Plugin Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: through 2.0.4
CVE-2025-6586
7.2
1%
Jul 4
Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload
Affected: through 2.2.8
CVE-2024-9829
6.5
0%
Oct 23
Download Plugin <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) User Metadata and Comment Download
Affected: through 2.2.0
CVE-2021-24703
5.7
0%
Nov 23
Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation
Affected: before 1.6.1
CVE-2021-25059
4.3
1%
Nov 28
Download Plugin < 2.0.0 - Subscriber+ Website Download
Affected: before 2.0.0
Showing 5