CVE-2026-119156 | codename065 Download Manager Plugin up to 7.5.9 on WordPress Shortcode cross site scripting

A vulnerability classified as problematic has been found in codename065 Download Manager Plugin up to 7.5.9 on WordPress. This affects an unknown part of the component Shortcode Handler. The manipulation of the argument wpdm_reg[first_name]/wpdm_reg[last_name]/wpdm_reg[user_login] leads to cross site scripting.

This vulnerability is traded as CVE-2026-119156. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More