Filtered by vendor W3eden Subscriptions
Total 46 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-34658 1 W3eden 1 Download Manager 2025-03-21 5.4 Medium
Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.
CVE-2024-56217 1 W3eden 1 Download Manager 2025-03-21 4.3 Medium
Missing Authorization vulnerability in W3 Eden, Inc. Download Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through 3.3.03.
CVE-2021-36896 1 W3eden 1 Pricing Table 2025-02-20 4.8 Medium
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2
CVE-2017-18497 1 W3eden 1 Live Forms 2024-11-21 N/A
The liveforms plugin before 3.4.0 for WordPress has XSS.
CVE-2015-9301 1 W3eden 1 Live Forms 2024-11-21 N/A
The liveforms plugin before 3.2.0 for WordPress has SQL injection.
CVE-2024-8444 1 W3eden 1 Download Manager 2024-11-01 5.4 Medium
The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting.