https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:16:35.303440+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-25211 cnvd-2022-25211 2026-10-12T22:16:35.307404+00:00 cnvd-2022-25211 https://cve.radiocsirt.org/vuln/euvd-2026-24475 EUVD-2026-24475 2026-10-12T22:16:35.307435+00:00 EUVD-2026-24475 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25087 fkie_cve-2021-25087 2026-10-12T22:16:35.307450+00:00

The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords (fixed in 3.2.24) and files Master Keys (fixed in 3.2.25).

 https://cve.radiocsirt.org/vuln/ghsa-hc7r-q2m2-f836 GHSA-hc7r-q2m2-f836 2026-10-12T22:16:35.307478+00:00

The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords (fixed in 3.2.24) and files Master Keys (fixed in 3.2.25).

 https://cve.radiocsirt.org/vuln/gsd-2021-25087 gsd-2021-25087 2026-10-12T22:16:35.307495+00:00 gsd-2021-25087