Vulnerabilities in codename065

41 results
Vexday analysis

O fornecedor codename065 apresenta um perfil de risco baixo a moderado com 35 CVEs registradas, nenhuma sob exploração ativa (KEV) e zero críticas. A fraqueza dominante é CWE-79 (Cross-site Scripting), típica de aplicações web, com apenas 2 vulnerabilidades publicadas nos últimos 90 dias, indicando risco atual contido.

CVE-2024-5266MEDIUMDownload Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple ShortcodesEPSS 0.4%CVE-2026-92714MEDIUMDownload Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' ParameterEPSS 0.4%CVE-2024-6208MEDIUMDownload Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.4%CVE-2026-2571MEDIUMDownload Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' ParameterEPSS 0.4%CVE-2025-3056MEDIUMDownload Manager <= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.4%CVE-2026-4057MEDIUMDownload Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection RemovalEPSS 0.4%CVE-2024-33938MEDIUMWordPress Sliding Widgets plugin <= 1.5.0 - Broken Access Control to XSS vulnerabilityEPSS 0.4%CVE-2026-13733MEDIUMDownload Manager <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'no_data_msg' Shortcode AttributeEPSS 0.4%CVE-2026-14343MEDIUMDownload Manager <= 3.3.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_before' and 'note_after' Shortcode AttributesEPSS 0.3%CVE-2026-5357MEDIUMDownload Manager <= 3.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.3%CVE-2024-4160MEDIUMDownload Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages ShortcodeEPSS 0.3%CVE-2024-11768MEDIUMDownload manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected FilesEPSS 0.3%CVE-2024-1766MEDIUMDownload Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site ScriptingEPSS 0.3%CVE-2026-1666MEDIUMDownload Manager <= 3.3.46 - Reflected Cross-Site Scripting via 'redirect_to' ParameterEPSS 0.3%CVE-2024-4001MEDIUMDownload Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form ShortcodeEPSS 0.3%CVE-2025-4367MEDIUMDownload Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard ShortcodeEPSS 0.2%CVE-2025-12177MEDIUMDownload Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron KeyEPSS 0.2%CVE-2025-10146MEDIUMDownload Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` ParameterEPSS 0.2%CVE-2025-15364HIGHDownload Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePasswordEPSS 0.2%CVE-2024-7386MEDIUMPremium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request ForgeryEPSS 0.2%