Product by Codename065

    Download Manager

    36 known vulnerabilities in Download Manager (Codename065), 0 of them actively exploited (CISA KEV).

    Key figures

    36

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Download Manager (Codename065)
    HighCVE-2022-2436

    Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization

    also in 1 other product

    		8.8
    HighCVE-2024-11740

    Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution

    also in 1 other product

    		7.3
    HighCVE-2025-3404

    Download Manager <= 3.3.12 - Authenticated (Author+) Arbitrary File Deletion

    		8.8
    HighCVE-2026-119156

    Codename065 Download Manager: Cross-site Scripting

    		7.2
    MediumCVE-2022-1985

    Download Manager <= 3.2.42 - Reflected Cross-Site Scripting

    also in 1 other product

    		6.1
    MediumCVE-2026-92714

    Codename065 Download Manager: Authorization Bypass Through User-Controlled Key

    		6.5
    MediumCVE-2022-2101

    Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2026-16685

    Codename065 Download Manager: Cross-site Scripting

    		6.4
    MediumCVE-2026-97338

    Codename065 Download Manager: Cross-site Scripting

    		6.4
    MediumCVE-2026-102401

    Codename065 Download Manager: Cross-site Scripting

    		6.4
    MediumCVE-2026-9696

    Codename065 Download Manager: Cross-site Scripting

    		6.4
    MediumCVE-2026-12054

    Codename065 Download Manager: Cross-site Scripting

    		6.1
    MediumCVE-2026-14343

    Codename065 Download Manager: Cross-site Scripting

    		6.4
    MediumCVE-2026-13733

    Codename065 Download Manager: Cross-site Scripting

    		6.4
    HighCVE-2025-1785

    Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite

    also in 1 other product

    		5.4
    MediumCVE-2023-2305

    Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    also in 1 other product

    		6.4
    HighCVE-2024-2098

    Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary

    also in 1 other product

    		7.5
    MediumCVE-2023-6954

    Download Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    also in 1 other product

    		6.4
    MediumCVE-2026-103964

    Codename065 Download Manager: Exposure of Sensitive Information to an Unauthorized Actor

    		4.3
    MediumCVE-2026-5357

    Codename065 Download Manager: Cross-site Scripting

    		6.4
    HighCVE-2025-15364

    Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword

    		7.3
    MediumCVE-2026-1666

    Download Manager <= 3.3.46 - Reflected Cross-Site Scripting via 'redirect_to' Parameter

    		6.1
    MediumCVE-2023-6785

    Download Manager <= 3.2.84 - Missing Authorization

    also in 1 other product

    		5.3
    MediumCVE-2024-5266

    Codename065 Download Manager: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-6208

    Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    also in 1 other product

    		6.4

    All vulnerabilities in search

    All products by Codename065