PatchTheCVEcm download manager vulnerabilities and fixes
Recent CVEs affecting cm download manager, with upgrade or downgrade steps. 9 tracked.
Also searched as: cmdownloadmanager.
cm download manager has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2024-03-25. Highest priority: CVE-2014-8877 (score 64/100).
- CVE-2024-1962 HIGH 8.8 UPGRADE The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could a
- CVE-2024-1232 MEDIUM 4.8 UPGRADE The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could a
- CVE-2024-1231 MEDIUM 6.8 UPGRADE The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could a
- CVE-2022-3076 HIGH 7.2 UPGRADE The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbi
- CVE-2020-27344 MEDIUM 6.1 UPGRADE The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.
- CVE-2020-24146 HIGH 8.1 DOWNGRADE Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows aut
- CVE-2020-24145 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for
- CVE-2014-9129 MEDIUM 6.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7
- CVE-2014-8877 HIGH 10.0 UPGRADE The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Ma
FAQ
How do I fix cm download manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cm download manager being exploited right now?
None of the tracked cm download manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cm download manager CVE should I patch first?
CVE-2014-8877 currently ranks highest (64/100): The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Ma.