Security
فارسی
All products

download-monitor

WordPress · Plugin
34 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Download Monitor <= 5.3.3 - Reflected Cross-Site ScriptingCVE-2026-112207 download-monitor WordPress Medium Fix reported
Download Monitor < 5.3.5 - Missing AuthorizationCVE-2026-112219 download-monitor WordPress Low Fix reported
Download Monitor <= 5.3.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-110375 download-monitor WordPress Medium Fix reported
Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin EditorCVE-2026-100182 download-monitor WordPress High Fix reported
Download Monitor <= 5.2.5 - Missing AuthorizationCVE-2026-16608 download-monitor WordPress Medium Fix reported
Download Monitor <= 5.1.9 - Authenticated (Author+) Arbitrary File DownloadCVE-2026-39489 download-monitor WordPress Medium Fix reported
Download Monitor <= 5.1.8 - Authenticated (Contributor+) SQL InjectionCVE-2026-39486 download-monitor WordPress Medium Fix reported
Download Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and DisablingCVE-2026-4401 download-monitor WordPress Medium Fix reported
Download Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'CVE-2026-3124 download-monitor WordPress High Fix reported
Download Monitor <= 5.0.22 - Authenticated (Contributor+) Local File InclusionCVE-2025-47439 download-monitor WordPress High Fix reported
Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information ExposureCVE-2024-10399 download-monitor WordPress Medium Fix reported
Download Monitor <= 5.0.12 - Missing Authorization to API Key ManipulationCVE-2024-10092 download-monitor WordPress Medium Fix reported
Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data ExportCVE-2022-4972 download-monitor WordPress High Fix reported
Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST APICVE-2022-45354 download-monitor WordPress Medium Fix reported
Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop EnableCVE-2024-8552 download-monitor WordPress Medium Fix reported
Download Monitor <= 4.9.13 - Missing AuthorizationCVE-2024-3269 download-monitor WordPress Medium Fix reported
Download Monitor <= 4.9.4 - Authenticated (Admin+) SQL InjectionCVE-2024-30501 download-monitor WordPress High Fix reported
Download Monitor <= 1.6.3 - Directory Listing to Information Disclosure download-monitor WordPress Medium Fix reported
Download Monitor <= 3.3.5.8 - Reflected Cross-Site ScriptingCVE-2012-4768 download-monitor WordPress Medium Fix reported
Download Monitor <= 1.9.6 - Missing Authorization download-monitor WordPress Medium Fix reported