CVE-2022-36288: w3eden Download Manager

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

Affected products

• w3eden Download Manager: up to and including 3.2.48

Published 2022-08-23. Last modified 2026-06-17.