8.5
Élevée
CVE-2026-39486 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through <= 5.1.8.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Download Monitor 5.1 | premières → 5.1.8 | Pas de correctif indiqué |
Autres CVE de Download Monitor
Les 4 CVE de Download Monitor →
CVE-2026-110375
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill…
6.5
Moyenne
CVE-2026-39489
Author Arbitrary File Download in Download Monitor <= 5.1.9 versions
4.4
Moyenne
CVE-2025-47439
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
Élevée