| CVE-2026-2383 |
The Simple Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field in all…
|
6.4
Medium
|
Feb 27, 2026 |
| CVE-2025-8977 |
The Simple Download Monitor plugin for WordPress is vulnerable to time-based SQL Injection via the order parameter in…
|
6.5
Medium
|
Aug 28, 2025 |
| CVE-2025-58197 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mra13 Simple…
|
6.5
Medium
|
Aug 27, 2025 |
| CVE-2025-24663 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mra13 Simple…
|
7.6
High
|
Jan 24, 2025 |