CVE-2022-34658: w3eden Download Manager

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

Affected products

• w3eden Download Manager: up to and including 3.2.48

Published 2022-08-23. Last modified 2026-06-17.