CVE-2020-27344

The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.

• CWE-79

• https://gist.github.com/qwebee/da79c6a9fa982c3c40988a1e0598c0d9Exploit, Third Party Advisory
• https://wordpress.org/plugins/cm-download-manager/#developersRelease Notes, Third Party Advisory
• https://gist.github.com/qwebee/da79c6a9fa982c3c40988a1e0598c0d9Exploit, Third Party Advisory
• https://wordpress.org/plugins/cm-download-manager/#developersRelease Notes, Third Party Advisory

Published

Oct 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27336An issue was discovered in Treck IPv6 before 6.0.1.68. Impro…5.3
• CVE-2020-27337An issue was discovered in Treck IPv6 before 6.0.1.68. Impro…7.3
• CVE-2020-27338An issue was discovered in Treck IPv6 before 6.0.1.68. Impro…7.1
• CVE-2020-27339In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers d…6.7
• CVE-2020-2734Vulnerability in the RDBMS/Optimizer component of Oracle Dat…2.4
• CVE-2020-27340The online help portal of Mitel MiCollab before 9.2 could al…6.1
• CVE-2020-27346Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-27347In tmux before version 3.1c the function input_csi_dispatch_…7.8
• CVE-2020-27348In some conditions, a snap package built by snapcraft includ…6.8
• CVE-2020-27349Aptdaemon performed policykit checks after interacting with …5.5
• CVE-2020-2735Vulnerability in the Java VM component of Oracle Database Se…8
• CVE-2020-27350APT had several integer overflows and underflows while parsi…5.7