Vulnerability history

Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' Parameter vulnerability

Reflected Cross-Site Scripting via 'redirect_to' Parameter vulnerability

Unauthenticated Limited Privilege Escalation via updatePassword vulnerability

Unauthenticated Cron Trigger due to Hardcoded Cron Key vulnerability

Sensitive Data Exposure vulnerability

Cross Site Request Forgery (CSRF) Vulnerability

Sensitive Data Exposure Vulnerability

Reflected Cross-Site Scripting via `user_ids` Parameter vulnerability

Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode vulnerability

Admin+ Stored XSS vulnerability

Authenticated (Author+) Arbitrary File Deletion vulnerability

Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated (Author+) Path Traversal to Limited File Overwrite vulnerability

Unauthenticated Information Disclosure via Unprotected Directory vulnerability

Admin+ Stored XSS vulnerability

Broken Access Control vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability

Improper Authorization to Unauthenticated Download of Password-Protected Files vulnerability

Contributor+ Stored XSS vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting vulnerability

Improper Authorization via protectMediaLibrary vulnerability

Authenticated Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode vulnerability

File Password Lock Bypass vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Missing Authorization vulnerability

Broken Access Controls vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Unauthenticated Sensitive Information Disclosure vulnerability

Contributor+ Stored XSS vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated PHAR Deserialization vulnerability

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Cross-Site Request Forgery (CSRF) vulnerability

Bypass IP Address Blocking Restriction vulnerability

Authenticated Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Brute Force of Files Master Key vulnerability

Sensitive Information Disclosure vulnerability

Authenticated SQL injection (SQLi) vulnerability to Reflected XSS vulnerability

Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting (XSS) vulnerability

Email Template Setting Update via Cross-Site Request Forgery (CSRF) vulnerability

Authenticated File Upload vulnerability

Multiple vulnerabilities

Authenticated Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Authenticated Arbitrary File Upload Vulnerability

Multiple Vulnerabilities

Stored XSS

Authenticated Stored XSS

XSS

Remote Code Execution

Multiple CSRF and XSS

Privilege Escalation

Arbitrary File Download

Persistent Cross Site Scripting

CSRF

Arbitrary File Upload