W3eden: >> Download Manager >> 2.9.51 Security Vulnerabilities
The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to wp-admin/admin-ajax.php.
CVSS Score
6.1
EPSS Score
0.009
Published
2018-01-16
Page 5