CVEs we hold for Codename065
Records whose assigning authority named Codename065 as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-92714Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information…codename065 Download Manager
CVE-2026-5357Download Manager <= 3.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributescodename065 Download Manager
CVE-2026-4057Download Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection Removalcodename065 Download Manager
CVE-2026-2571Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user'…codename065 Download Manager
CVE-2026-16685Download Manager <= 3.3.66 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Shortcode Attributecodename065 Download Manager
CVE-2026-1666Download Manager <= 3.3.46 - Reflected Cross-Site Scripting via 'redirect_to' Parametercodename065 Download Manager
CVE-2026-15906Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parametercodename065 Premium Packages – Sell Digital Products…
CVE-2026-15348Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parametercodename065 Premium Packages – Sell Digital Products…
CVE-2026-14343Download Manager <= 3.3.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_before' and…codename065 Download Manager
CVE-2026-13733Download Manager <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'no_data_msg' Shortcode…codename065 Download Manager
CVE-2026-12800Premium Packages <= 6.2.0 - Unauthenticated SQL Injectioncodename065 Premium Packages – Sell Digital Products…
CVE-2025-4367Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcodecodename065 Download Manager
CVE-2025-3404Download Manager <= 3.3.12 - Authenticated (Author+) Arbitrary File Deletioncodename065 Download Manager
CVE-2025-3056Download Manager <= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadcodename065 Download Manager
CVE-2025-1785Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwritecodename065 Download Manager
CVE-2025-15364Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePasswordcodename065 Download Manager
CVE-2025-13498Download Manager <= 3.3.32 - Missing Authorization to Authenticated (Subscriber+) Media Attachment Password Disclosurecodename065 Download Manager
CVE-2025-12177Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Keycodename065 Download Manager
CVE-2025-10146Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parametercodename065 Download Manager
CVE-2024-7560News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injectioncodename065 News Flash
CVE-2024-7486MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injectioncodename065 MultiPurpose
CVE-2024-7386Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgerycodename065 Premium Packages – Sell Digital Products…
CVE-2024-6208Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecodename065 Download Manager
CVE-2024-5266Download Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodescodename065 Download Manager
CVE-2024-4160Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcodecodename065 Download Manager
CVE-2024-4001Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form…codename065 Download Manager
CVE-2024-33938WordPress Sliding Widgets plugin <= 1.5.0 - Broken Access Control to XSS vulnerabilitycodename065 Sliding Widgets
CVE-2024-2098Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrarycodename065 Download Manager
CVE-2024-1766Download Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scriptingcodename065 Download Manager
CVE-2024-11768Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Filescodename065 Download Manager
CVE-2024-11740Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Executioncodename065 Download Manager
CVE-2024-11225Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_argcodename065 Premium Packages – Sell Digital Products…
CVE-2024-10164Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting…codename065 Premium Packages – Sell Digital Products…
CVE-2023-6954Download Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecodename065 Download Manager
CVE-2023-4293Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+)…codename065 Premium Packages – Sell Digital Products…
CVE-2023-2305Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecodename065 Download Manager
CVE-2022-2436Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserializationcodename065 Download Manager
CVE-2022-2101Download Manager <= 3.2.46 - Contributor+ Cross-Site Scriptingcodename065 Download Manager
CVE-2022-1985Download Manager <= 3.2.42 - Reflected Cross-Site Scriptingcodename065 Download Manager
40 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.