← All advisories

Unrated severityNVD Advisory· Published Mar 18, 2022· Updated Apr 28, 2026

WordPress WP-DownloadManager plugin <= 1.68.6 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability

CVE-2021-44760

Description

Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Wp Downloadmanagerllm-fuzzy
Range: <=1.68.6
Package: https://wordpress.org/plugins/wp-downloadmanager
Lester 'GaMerZ' Chan/WP-DownloadManager (WordPress plugin)v5
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/wp-downloadmanager/wordpress-wp-downloadmanager-plugin-1-68-6-authenticated-reflected-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.