CVE-2024-11740 Scanner
CVE-2024-11740 Scanner - Code Injection vulnerability in Download Manager
Used 2.1k times · 3.4k assets checked · domain, subdomain, ipv4
CVE
CVE-2024-11740
7.3
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
download manager
Updated Oct 12, 2026View on NVD →
S4E scanner
CVE history: download manager
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →