# Cisco Download Manager vulnerabilities Source: https://junglewise.ai/threats/technologies/download-manager Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/download-manager.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 7 vulnerabilities in Cisco Download Manager: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-92714, was published on 18 September 2026. Nothing in the last four weeks, down from 1 vulnerability in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 1 - All time: 7 (0 critical, 0 exploited in the wild) ## About Cisco Download Manager Software used to manage and facilitate the downloading of Cisco product updates and images. ## Latest Cisco Download Manager vulnerabilities - [CVE-2026-92714: WordPress Download Manager IDOR via duplicate function](https://junglewise.ai/threats/cve-2026-92714-wordpress-download-manager-idor-via-duplicate-function) (medium, CVSS 6.5, published 18 Sep 2026) - [CVE-2026-14292: WPDM Download Manager stored XSS in package title](https://junglewise.ai/threats/cve-2026-14292-wpdm-download-manager-stored-xss-in-package-title) (info, CVSS 6.8, published 1 Aug 2026) - [CVE-2026-14235: Download Manager WordPress plugin unauthorized download via reusable key](https://junglewise.ai/threats/cve-2026-14235-download-manager-wordpress-plugin-unauthorized-download-via) (info, CVSS 3.7, published 27 Jul 2026) - [CVE-2026-14343: WordPress Download Manager Stored XSS in Shortcode Attributes](https://junglewise.ai/threats/cve-2026-14343-wordpress-download-manager-stored-xss-in-shortcode-attributes) (medium, CVSS 6.4, published 9 Jul 2026) - [CVE-2026-13733: WordPress Download Manager Stored XSS in no_data_msg shortcode](https://junglewise.ai/threats/cve-2026-13733-wordpress-download-manager-stored-xss-in-no-data-msg-shortcode) (medium, CVSS 6.4, published 1 Jul 2026) - [CVE-2026-39676: Shahjada Download Manager missing authorization in access control](https://junglewise.ai/threats/cve-2026-39676-shahjada-download-manager-missing-authorization-in-access-control) (medium, CVSS 5.3, published 8 Apr 2026) - [CVE-2026-39615: Shahjada Download Manager Stored XSS in WordPress plugin](https://junglewise.ai/threats/cve-2026-39615-shahjada-download-manager-stored-xss-in-wordpress-plugin) (medium, CVSS 5.9, published 8 Apr 2026) ## Most severe Cisco Download Manager vulnerabilities - [CVE-2026-92714: WordPress Download Manager IDOR via duplicate function](https://junglewise.ai/threats/cve-2026-92714-wordpress-download-manager-idor-via-duplicate-function) (medium, CVSS 6.5, published 18 Sep 2026) - [CVE-2026-14343: WordPress Download Manager Stored XSS in Shortcode Attributes](https://junglewise.ai/threats/cve-2026-14343-wordpress-download-manager-stored-xss-in-shortcode-attributes) (medium, CVSS 6.4, published 9 Jul 2026) - [CVE-2026-13733: WordPress Download Manager Stored XSS in no_data_msg shortcode](https://junglewise.ai/threats/cve-2026-13733-wordpress-download-manager-stored-xss-in-no-data-msg-shortcode) (medium, CVSS 6.4, published 1 Jul 2026) - [CVE-2026-39615: Shahjada Download Manager Stored XSS in WordPress plugin](https://junglewise.ai/threats/cve-2026-39615-shahjada-download-manager-stored-xss-in-wordpress-plugin) (medium, CVSS 5.9, published 8 Apr 2026) - [CVE-2026-39676: Shahjada Download Manager missing authorization in access control](https://junglewise.ai/threats/cve-2026-39676-shahjada-download-manager-missing-authorization-in-access-control) (medium, CVSS 5.3, published 8 Apr 2026) - [CVE-2026-14292: WPDM Download Manager stored XSS in package title](https://junglewise.ai/threats/cve-2026-14292-wpdm-download-manager-stored-xss-in-package-title) (info, CVSS 6.8, published 1 Aug 2026) - [CVE-2026-14235: Download Manager WordPress plugin unauthorized download via reusable key](https://junglewise.ai/threats/cve-2026-14235-download-manager-wordpress-plugin-unauthorized-download-via) (info, CVSS 3.7, published 27 Jul 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 1 vulnerability in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Cisco technologies - [Cisco IOS](https://junglewise.ai/threats/technologies/ios): 70 vulnerabilities - [Cisco Identity Services Engine](https://junglewise.ai/threats/technologies/identity-services-engine): 58 vulnerabilities - [Cisco IOS XE](https://junglewise.ai/threats/technologies/ios-xe): 57 vulnerabilities - [Cisco Firepower Threat Defense](https://junglewise.ai/threats/technologies/firepower-threat-defense): 33 vulnerabilities - [Cisco Firepower Threat Defense Software](https://junglewise.ai/threats/technologies/firepower-threat-defense-software): 33 vulnerabilities - [Cisco IOS XR](https://junglewise.ai/threats/technologies/ios-xr): 31 vulnerabilities - [Cisco IOS XE Software](https://junglewise.ai/threats/technologies/ios-xe-software): 28 vulnerabilities - [Cisco Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-asa-software): 23 vulnerabilities - [Cisco Snort 3](https://junglewise.ai/threats/technologies/snort-3): 20 vulnerabilities - [Cisco Ios Software](https://junglewise.ai/threats/technologies/ios-software): 19 vulnerabilities - [Cisco ISE Passive Identity Connector](https://junglewise.ai/threats/technologies/ise-passive-identity-connector): 19 vulnerabilities - [Cisco Secure Firewall Management Center](https://junglewise.ai/threats/technologies/secure-firewall-management-center): 16 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Cisco Download Manager vulnerabilities", https://junglewise.ai/threats/technologies/download-manager, 11 November 2026.