What’s Vulnerable › Products

gamerz WP-DownloadManager vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your gamerz WP-DownloadManager version is affected

Latest gamerz WP-DownloadManager vulnerabilities

• CVE-2026-2426 — WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter (CVSS 6.5)
• CVE-2026-2419 — WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter (CVSS 2.7)
• CVE-2025-10747 — WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload (CVSS 7.2)
• CVE-2025-4799 — WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion (CVSS 7.2)
• CVE-2025-4798 — WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Read (CVSS 4.9)
• CVE-2022-25606 — WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 5.4)
• CVE-2022-25605 — WordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 5.4)
• CVE-2021-44760 — WordPress WP-DownloadManager plugin <= 1.68.6 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2020-24141 — (CVSS 5.3)