Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

codename065 vulnerabilities

50 published CVEs name codename065 among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-119156

    Download Manager <= 7.5.9 - Unauthenticated Stored Cross-Site Scripting via Registration Form (WP_Error-as-ID) via Spotlight Template [author_name]

    codename065 · Download Manager

    High7.2
  • CVE-2026-110664

    Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes

    codename065 · Premium Packages – Sell Digital Products Securely

    Medium6.4
  • CVE-2026-18586

    Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'

    codename065 · Premium Packages – Sell Digital Products Securely

    High7.2
  • CVE-2026-103478

    Premium Packages <= 7.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkout[billing][phone]' Parameter

    codename065 · Premium Packages – Sell Digital Products Securely

    Medium6.4
  • CVE-2026-12054

    Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' Parameter

    codename065 · Download Manager

    Medium6.1
  • CVE-2026-9696

    Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode

    codename065 · Download Manager

    Medium6.4
  • CVE-2026-103964

    Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email

    codename065 · Download Manager

    Medium4.3
  • CVE-2026-102401

    Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode Attribute

    codename065 · Download Manager

    Medium6.4
  • CVE-2026-97338

    Download Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name

    codename065 · Download Manager

    Medium6.4
  • CVE-2026-93654

    Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter

    codename065 · Premium Packages – Sell Digital Products Securely

    High7.2
All 50 in the list