WordPress plugin
Download Plugins and Themes in ZIP from Dashboard security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium5
- Low0
All Download Plugins and Themes in ZIP from Dashboard vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery to Bulk Plugin/Theme Archival ≤1.9.6Update to 1.9.7 | CVE-2025-14399 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.9.1Update to 1.9.2 | CVE-2024-9232 | |
| Medium4.2 | Cross-Site Request Forgery ≤1.8.7Update to 1.8.8 | CVE-2024-7501 | |
| Medium4.9 | Authenticated (Admin+) Arbitrary File Download ≤1.8.5Update to 1.8.6 | CVE-2024-35162 | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting <1.6.0Update to 1.6.0 | CVE-2019-17239 |
- Medium4.3Cross-Site Request Forgery to Bulk Plugin/Theme Archival
≤1.9.6Update to 1.9.7
- Medium6.1Reflected Cross-Site Scripting
≤1.9.1Update to 1.9.2
- Medium4.2Cross-Site Request Forgery
≤1.8.7Update to 1.8.8
- Medium4.9Authenticated (Admin+) Arbitrary File Download
≤1.8.5Update to 1.8.6
- Medium6.1Unauthenticated Stored Cross-Site Scripting
<1.6.0Update to 1.6.0
Download Plugins and Themes in ZIP from Dashboard: common questions
Does Download Plugins and Themes in ZIP from Dashboard have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Download Plugins and Themes in ZIP from Dashboard: 5 medium. None are known to affect version null.
How do I check which version of Download Plugins and Themes in ZIP from Dashboard I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Download Plugins and Themes in ZIP from Dashboard vulnerability?
CVE-2025-14399, published Dec 16, 2025: Download Plugins and Themes from Dashboard <= 1.9.6 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival. Severity: Medium (CVSS 4.3).
Is any Download Plugins and Themes in ZIP from Dashboard vulnerability listed in CISA KEV?
No. None of the known Download Plugins and Themes in ZIP from Dashboard vulnerabilities is currently listed in the CISA KEV catalog.