| 2026-10-16 |
WPSEC-2026-1064 |
Download Manager <= 3.3.72 - Unauthenticated Missing Authorization to Restricted Package Download via Password Lock |
Low 3.7 |
3.3.73 |
| 2026-10-16 |
WPSEC-2026-1063 |
Download Manager <= 3.3.72 - Unauthenticated Missing Authorization to Protected File Download via Audio, Video and PDF Preview Links |
Medium 5.3 |
3.3.73 |
| 2026-10-03 |
WPSEC-2026-0377 |
Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode Attribute |
Medium 5.4 |
3.3.72 |
| 2026-10-03 |
WPSEC-2026-0376 |
Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Tokens |
Medium 5.7 |
3.3.72 |
| 2026-10-02 |
WPSEC-2026-0248 |
Download Manager <= 3.3.70 - Cross-Site Request Forgery to Privacy Settings Update |
Medium 4.3 |
3.3.71 |
| 2026-10-02 |
WPSEC-2026-0247 |
Download Manager <= 3.3.70 - Unauthenticated Missing Authorization to Protected File Download via CAPTCHA Validation |
High 7.5 |
3.3.71 |
| 2026-10-02 |
WPSEC-2026-0246 |
Download Manager <= 3.3.70 - Authenticated (Author+) Stored Cross-Site Scripting via Package Icon URL |
Medium 6.4 |
3.3.71 |
| 2026-10-02 |
WPSEC-2026-0245 |
Download Manager <= 3.3.70 - Authenticated (Author+) Stored Cross-Site Scripting via Package Title in Download History Filter |
Medium 5.4 |
3.3.71 |
| 2026-10-02 |
WPSEC-2026-0244 |
Download Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name |
Medium 5.4 |
3.3.71 |
