Vulnerabilities in codename065
50 resultsCVE-2026-18586HIGHPremium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'EPSS 0.2%CVE-2026-2571MEDIUMDownload Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' ParameterEPSS 0.2%CVE-2025-10146MEDIUMDownload Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` ParameterEPSS 0.2%CVE-2026-97338MEDIUMDownload Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display NameEPSS 0.2%CVE-2026-110664MEDIUMPremium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order NotesEPSS 0.2%CVE-2025-15364HIGHDownload Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePasswordEPSS 0.2%CVE-2026-102401MEDIUMDownload Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode AttributeEPSS 0.2%CVE-2024-7386MEDIUMPremium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request ForgeryEPSS 0.2%CVE-2026-12054MEDIUMDownload Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' ParameterEPSS 0.2%CVE-2026-9696MEDIUMDownload Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages ShortcodeEPSS 0.2%