Codename065 vulnerabilities
50 CVEs and advisories name Codename065 as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-11740Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution
- CVE-2024-11225Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg
- CVE-2024-10164Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode
- CVE-2024-7386Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery
- CVE-2024-7486MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-7560News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection
- CVE-2024-6208Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-2098Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary
- CVE-2024-1766Download Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
- CVE-2024-5266Download Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes
- CVE-2024-4001Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode
- CVE-2024-4160Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode
- CVE-2024-33938WordPress Sliding Widgets plugin <= 1.5.0 - Broken Access Control to XSS vulnerability
- CVE-2023-6785Download Manager <= 3.2.84 - Missing Authorization
- CVE-2023-6954Download Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-4293Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation
- CVE-2023-2305Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2022-2436Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization
- CVE-2022-2101Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting
- CVE-2022-1985Download Manager <= 3.2.42 - Reflected Cross-Site Scripting