Login Request a demo
CO
Vendor
codename065
6 products with CVEs on record
50
CVEs
0
On KEV
8
New 30D
Products
DM
Download Manager
codename065
8.8
35 CVEs0 on KEV5 new
PP
Premium Packages – Sell Digital Products Securely
codename065
7.5
11 CVEs0 on KEV3 new
MU
MultiPurpose
codename065
8.8
1 CVEs0 on KEV0 new
NF
News Flash
codename065
7.2
1 CVEs0 on KEV0 new
NE
Newsflash
Codename065
7.2
1 CVEs0 on KEV0 new
SW
Sliding Widgets
codename065
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-110664
PP
Premium Packages – Sell Digital Products Securely
codename065
6.4
0%
Oct 16Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes
CVE-2026-18586
PP
Premium Packages – Sell Digital Products Securely
codename065
7.2
0%
Oct 15Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'
CVE-2026-103478
PP
Premium Packages – Sell Digital Products Securely
codename065
6.4
0%
Oct 10Premium Packages <= 7.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkout[billing][phone]' Parameter
CVE-2026-12054
DM
Download Manager
codename065
6.1
0%
Oct 10Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' Parameter
CVE-2026-9696
DM
Download Manager
codename065
6.4
0%
Oct 10Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode
CVE-2026-103964
DM
Download Manager
codename065
4.3
0%
Oct 10Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email
CVE-2026-102401
DM
Download Manager
codename065
6.4
0%
Oct 10Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode Attribute
CVE-2026-97338
DM
Download Manager
codename065
6.4
0%
Oct 2Download Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name
CVE-2026-93654
PP
Premium Packages – Sell Digital Products Securely
codename065
7.2
0%
Sep 25Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter
CVE-2026-92714
DM
Download Manager
codename065
6.5
0%
Sep 18Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' Parameter
CVE-2026-16685
DM
Download Manager
codename065
6.4
0%
Aug 1Download Manager <= 3.3.66 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Shortcode Attribute
CVE-2026-12800
PP
Premium Packages – Sell Digital Products Securely
codename065
7.5
2%
Jul 28Premium Packages <= 6.2.0 - Unauthenticated SQL Injection
CVE-2026-15348
PP
Premium Packages – Sell Digital Products Securely
codename065
6.3
1%
Jul 23Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter
CVE-2026-15906
PP
Premium Packages – Sell Digital Products Securely
codename065
6.5
0%
Jul 23Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter
CVE-2026-14343
DM
Download Manager
codename065
6.4
0%
Jul 9Download Manager <= 3.3.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_before' and 'note_after' Shortcode Attributes
CVE-2026-13733
DM
Download Manager
codename065
6.4
0%
Jul 1Download Manager <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attribute
CVE-2026-4057
DM
Download Manager
codename065
4.3
0%
Apr 10Download Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection Removal
CVE-2026-5357
DM
Download Manager
codename065
6.4
0%
Apr 9Download Manager <= 3.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-2571
DM
Download Manager
codename065
4.3
0%
Mar 19Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' Parameter
CVE-2026-1666
DM
Download Manager
codename065
6.1
0%
Feb 18Download Manager <= 3.3.46 - Reflected Cross-Site Scripting via 'redirect_to' Parameter
CVE-2025-15364
DM
Download Manager
codename065
7.3
0%
Jan 6Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword
CVE-2025-13498
DM
Download Manager
codename065
4.3
0%
Dec 18Download Manager <= 3.3.32 - Missing Authorization to Authenticated (Subscriber+) Media Attachment Password Disclosure
CVE-2025-12177
DM
Download Manager
codename065
5.3
0%
Nov 8Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key
CVE-2025-10146
DM
Download Manager
codename065
6.1
0%
Sep 19Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameter
CVE-2025-4367
DM
Download Manager
codename065
5.4
0%
Jun 19Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode
CVE-2025-3404
DM
Download Manager
codename065
8.8
1%
Apr 19Download Manager <= 3.3.12 - Authenticated (Author+) Arbitrary File Deletion
CVE-2025-3056
DM
Download Manager
codename065
5.4
0%
Apr 18Download Manager <= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2025-1785
DM
Download Manager
codename065
8.1
1%
Mar 13Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite
CVE-2024-11768
DM
Download Manager
codename065
5.3
0%
Dec 19Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files
CVE-2024-11740
DM
Download Manager
codename065
7.3
2%
Dec 19Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-11225
PP
Premium Packages – Sell Digital Products Securely
codename065
6.1
1%
Nov 22Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg
CVE-2024-10164
PP
Premium Packages – Sell Digital Products Securely
codename065
6.4
1%
Nov 21Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode
CVE-2024-7386
PP
Premium Packages – Sell Digital Products Securely
codename065
4.3
0%
Sep 25Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery
CVE-2024-7486
MU
MultiPurpose
codename065
8.8
1%
Aug 8MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-7560
NF
News Flash
codename065
7.2
1%
Aug 8News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection
CVE-2024-6208
DM
Download Manager
codename065
5.4
0%
Jul 31Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-2098
DM
Download Manager
codename065
7.5
0%
Jun 13Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary
CVE-2024-1766
DM
Download Manager
codename065
5.4
0%
Jun 12Download Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
CVE-2024-5266
DM
Download Manager
codename065
5.4
0%
Jun 12Download Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes
CVE-2024-4001
DM
Download Manager
codename065
5.4
0%
Jun 5Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode
CVE-2024-4160
DM
Download Manager
codename065
5.4
0%
May 31Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode
CVE-2024-33938
SW
Sliding Widgets
codename065
6.5
0%
May 2WordPress Sliding Widgets plugin <= 1.5.0 - Broken Access Control to XSS vulnerability
CVE-2023-6785
DM
Download Manager
codename065
5.3
1%
Mar 13Download Manager <= 3.2.84 - Missing Authorization
CVE-2023-6954
DM
Download Manager
codename065
5.4
1%
Mar 13Download Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-4293
PP
Premium Packages – Sell Digital Products Securely
codename065
6.5
1%
Aug 12Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation
CVE-2023-2305
DM
Download Manager
codename065
5.4
1%
Jun 9Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2022-2436
DM
Download Manager
codename065
8.8
2%
Sep 6Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization
CVE-2022-2101
DM
Download Manager
codename065
5.4
1%
Jul 18Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting
CVE-2022-1985
DM
Download Manager
codename065
6.1
1%
Jun 13Download Manager <= 3.2.42 - Reflected Cross-Site Scripting