What’s Vulnerable › Products

metagauss Download Plugin vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your metagauss Download Plugin version is affected

Latest metagauss Download Plugin vulnerabilities

• CVE-2025-6586 — Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2)
• CVE-2024-9829 — Download Plugin <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) User Metadata and Comment Download (CVSS 6.5)
• CVE-2022-36345 — WordPress Download Plugin Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2021-25059 — Download Plugin < 2.0.0 - Subscriber+ Website Download (CVSS 4.3)
• CVE-2021-24703 — Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation (CVSS 5.7)