Code Injection in Wordpress CM Download Manager plugin Description   An attacker can inject php code in Wordpress CM Download Manager plugin.       Default configuration   Profiles High Medium Low Internet Action Block Block Block Block Alarm Level Major Minor Minor Minor       References   URL: http://seclists.org/bugtraq/2014/Nov/103       Available since   ASQ v5.0.0       Protects   WordPress Third-Party Plugins and Themes Multiple Vulnerabilities 100 last CVE   CVE-2014-9179 CVE-2014-8955 CVE-2014-8877    Risk level  Low