CVE-2024-8444: w3eden Download Manager

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting.

Affected products

• w3eden Download Manager: before 3.3.00 (fixed in 3.3.00)

Published 2024-10-30. Last modified 2026-06-17.