Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
simple-download-monitor
WordPress
· Plugin
18 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Simple Download Monitor < 4.1.3 - Missing Authorization
CVE-2026-118637
simple-download-monitor
WordPress
Medium
Fix reported
2026-11-05
Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
CVE-2026-2383
simple-download-monitor
WordPress
Medium
Fix reported
2026-02-27
Simple Download Monitor <= 3.9.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-58197
simple-download-monitor
WordPress
Medium
Fix reported
2025-09-03
Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality
CVE-2025-8977
simple-download-monitor
WordPress
Medium
Fix reported
2025-08-28
Simple Download Monitor <= 3.9.25 - Authenticated (Administrator+) SQL Injection
CVE-2025-24663
simple-download-monitor
WordPress
Medium
Fix reported
2025-01-28
Simple Download Monitor <= 3.2.8 - Missing Authorization
simple-download-monitor
WordPress
Critical
Fix reported
2024-01-22
Simple Download Monitor <= 3.9.4 - Reflected Cross-Site Scripting
CVE-2021-24697
simple-download-monitor
WordPress
Medium
Fix reported
2024-01-22
Simple Download Monitor <= 3.8.8 - SQL Injection
CVE-2020-5651
simple-download-monitor
WordPress
High
Fix reported
2024-01-22
Simple Download Monitor <= 3.9.4 - Contributor+ Arbitrary File Download
CVE-2021-24692
simple-download-monitor
WordPress
Medium
Fix reported
2024-01-22
Simple Download Monitor <= 3.9.5 - Log Reset
simple-download-monitor
WordPress
Medium
Fix reported
2024-01-22
Simple Download Monitor <= 3.9.5 - Sensitive Data Exposure
CVE-2021-24695
simple-download-monitor
WordPress
Medium
Fix reported
2024-01-22
Simple Download Monitor < 3.5.4 - Authenticated Stored Cross-Site Scripting
CVE-2018-5213
simple-download-monitor
WordPress
Medium
Fix reported
2024-01-22
Simple Download Monitor < 3.5.4 - Authenticated Stored Cross-Site Scripting
CVE-2018-5212
simple-download-monitor
WordPress
Medium
Fix reported
2024-01-22
Simple Download Monitor <= 3.8.8 - Unauthenticated Stored Cross-Site Scripting
CVE-2020-5650
simple-download-monitor
WordPress
Medium
Fix reported
2024-01-22
Simple Download Monitor <= 3.9.10 - Contributor+ Stored Cross-Site Scripting via Shortcodes
CVE-2021-24694
simple-download-monitor
WordPress
Medium
Fix reported
2024-01-22
Simple Download Monitor <= 3.9.5 - Contributor+ Arbitrary Thumbnail Removal
CVE-2021-24698
simple-download-monitor
WordPress
Medium
Fix reported
2024-01-22
Simple Download Monitor <= 3.9.4 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
CVE-2021-24693
simple-download-monitor
WordPress
Critical
Fix reported
2024-01-22
Simple Download Monitor <= 3.9.8 - Multiple Cross-Site Request Forgery vulnerabilities
CVE-2021-24696
simple-download-monitor
WordPress
High
Fix reported
2024-01-22