CVE-2013-2697: Lesterchan Wp-Downloadmanager

Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Affected products

• Lesterchan Wp-Downloadmanager: up to and including 1.60; version 1.00 only; version 1.30 only; version 1.31 only; version 1.40 only; version 1.50 only

Published 2013-04-19. Last modified 2026-06-16.