CVE-2026-102401 | codename065 Download Manager Plugin up to 3.3.71 on WordPress login-form.php regurl cross site scripting

October 10, 2026 Yanac

A vulnerability identified as problematic has been detected in codename065 Download Manager Plugin up to 3.3.71 on WordPress. Impacted is an unknown function of the file login-form.php. This manipulation of the argument regurl causes cross site scripting.

This vulnerability is tracked as CVE-2026-102401. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More