CreativeMindsSolutions CM Download Manager
Moderate fix1 remedy
cpe:2.3:a:cminds:cm_download_manager:*:*:*:*:wordpress:*:*, +1 more
Moderate fix1 remedy
- <= 2.9.6
CreativeMindsSolutions CM Download Manager Path Traversal Vulnerability
Vulnerability
Patched
A path traversal vulnerability has been identified in the CreativeMindsSolutions CM Download Manager plugin for WordPress, affecting versions through 2.9.6. This vulnerability allows for improper limitation of a pathname, potentially leading to arbitrary file deletion.
Impact
Exploitation of this vulnerability could allow a malicious actor to delete arbitrary files from the website, including core files, which could disrupt the site's functionality.
Remediation
Users of the CM Download Manager plugin should update to version 3.0.0 or later. Patchstack users can enable auto-updates for vulnerable plugins.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.2impact
2.5exploitability
7.6remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.