Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

metagauss / download_plugin CVEs

Beta · best-effort

5 CVEs tagged to metagauss / download_plugin — 0 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to metagauss vendor archive

CVE-2025-6586

Published Jul 4, 2025

The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dpwap_plugin_locInstall function in all versions up to,…

CVSS 7.2 · High

Vendor/product tagsBeta · best-effort

CVE-2024-9829

Published Oct 23, 2024

The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the 'dpwap_handle_download_user' and 'dpwap_handle_down…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-36345

Published May 28, 2023

Cross-Site Request Forgery (CSRF) vulnerability in Metagauss Download Plugin <= 2.0.4 versions.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-25059

Published Nov 28, 2022

The Download Plugin WordPress plugin before 2.0.0 does not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users wi…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-24703

Published Nov 23, 2021

The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowing any authenticated users, such as subs…

CVSS 5.7 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1