← All advisories

Medium severity4.8NVD Advisory· Published Mar 18, 2022· Updated Jun 17, 2026

CVE-2021-44760

CVE-2021-44760

Description

Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Wp Downloadmanager Project/Wp Downloadmanager
cpe:2.3:a:wp-downloadmanager_project:wp-downloadmanager:*:*:*:*:*:wordpress:*:*
Range: <1.68.7
WordPress/Wp Downloadmanagerllm-fuzzy
Range: <=1.68.6
Package: https://wordpress.org/plugins/wp-downloadmanager
Lester 'GaMerZ' Chan/WP-DownloadManager (WordPress plugin)v5
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/wp-downloadmanager/wordpress-wp-downloadmanager-plugin-1-68-6-authenticated-reflected-cross-site-scripting-xss-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.