8.5
High
CVE-2026-39486 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through <= 5.1.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Download Monitor 5.1 | earliest → 5.1.8 | No fix stated |
Other CVEs of Download Monitor
The 4 CVEs of Download Monitor →
CVE-2026-110375
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill…
6.5
Medium
CVE-2026-39489
Author Arbitrary File Download in Download Monitor <= 5.1.9 versions
4.4
Medium
CVE-2025-47439
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
High