Skip to content
Sign in
7.2 High

CVE-2021-24786 The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter…

Description

The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue

Affected products and versions

Product Affected versions Fixed in
Download Monitor 4.4 earliest → < 4.4.5 4.4.5

Other CVEs of Download Monitor

The 6 CVEs of Download Monitor →
CVE-2026-112207 The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site… 7.1 High CVE-2026-112219 The Download Monitor WordPress plugin before 5.3.5 does not correctly restrict management of the list of filesystem… 4.9 Medium CVE-2026-16608 The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its… 5.3 Medium CVE-2022-2981 The Download Monitor WordPress plugin before 4.5.98 does not ensure that files to be downloaded are inside the blog… Not rated
Track this CVE