All the latestPacketstormsecurity.com reviews
WordPress Download Manager plugin versions 3.2.43 and below suffer from a cross site scripting vulnerability.
Source