WordPress Download Manager versions 3.2.42 and below suffer from a cross site scripting vulnerability. Continue reading...