PULSE
EN
FEED
ransombraincipher reclama a novagroupgbc.com · GB · Otherransombraincipher reclama a oflaherty-law.com · IE · Professional Servicesransombraincipher reclama a clinicaromero.com · AR · Healthcareransombraincipher reclama a sodali.com · US · Professional Servicesransombraincipher reclama a srsnodgrass.com · US · Professional Servicesransombraincipher reclama a prosomnus.com · US · Healthcareransombraincipher reclama a olyortho.com · US · Healthcareransombraincipher reclama a mvjllp.com · Not Foundransomaurora reclama a Allmand-Smith Limited · GB · Manufacturingransomn0n reclama a Hanjin Information Systems & Telecommunication Co., Ltd. · KR · Technologyransominterlock reclama a Coastal Alabama Community College · US · Educationransomsilentransomgroup reclama a Porter Hedges LLP · US · Professional Servicesransomhelix reclama a Westrock Coffee · US · Retail & E-Commerceransomakira reclama a Flextron Circuit Assembly · SG · Manufacturingransombraincipher reclama a novagroupgbc.com · GB · Otherransombraincipher reclama a oflaherty-law.com · IE · Professional Servicesransombraincipher reclama a clinicaromero.com · AR · Healthcareransombraincipher reclama a sodali.com · US · Professional Servicesransombraincipher reclama a srsnodgrass.com · US · Professional Servicesransombraincipher reclama a prosomnus.com · US · Healthcareransombraincipher reclama a olyortho.com · US · Healthcareransombraincipher reclama a mvjllp.com · Not Foundransomaurora reclama a Allmand-Smith Limited · GB · Manufacturingransomn0n reclama a Hanjin Information Systems & Telecommunication Co., Ltd. · KR · Technologyransominterlock reclama a Coastal Alabama Community College · US · Educationransomsilentransomgroup reclama a Porter Hedges LLP · US · Professional Servicesransomhelix reclama a Westrock Coffee · US · Retail & E-Commerceransomakira reclama a Flextron Circuit Assembly · SG · Manufacturing
← Todos los CVEs
CVE Watch21 oct 2026

CVE-2026-86611

The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF checks in some places

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 21 oct 2026 · Última mod.: 21 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF checks in some places, allowing attackers to make a logged in admin update its privacy and storage settings via a crafted link, including the credential that gates its unauthenticated maintenance endpoint.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.