CVE-2017-2216

CVE-2017-2216: vulnerability in W3 Eden, Inc. WordPress Download Manager

Published · Updated

Follow this CVE+ Monitor WordPress Download Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
W3 Eden, Inc. · WordPress Download Manager
Related CVEs — W3 Eden, Inc. WordPress Download Manager

In the same product, most dangerous first.

CVE-2017-2217—CVE-2017-2217EPSS 1.5%CVE-2021-34638MEDIUMWordPress Download Manager <= 3.1.24 Authenticated Directory TraversalEPSS 1.3%CVE-2021-34639HIGHWordPress Download Manager <= 3.1.24 Authenticated Arbitrary File UploadEPSS 0.6%