Skip to content

Known vulnerabilities in wpchill Download Monitor

Is your version affected?

CVE Summary Score Published
CVE-2026-100182 The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to… 7.2 High Oct 2, 2026
CVE-2026-4401 The Download Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in the `actions_handler()` and… 5.4 Medium Apr 7, 2026
CVE-2026-3124 The Download Monitor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… 7.5 High Mar 30, 2026
CVE-2024-10399 The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… 4.3 Medium Oct 30, 2024
CVE-2024-10092 The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… 4.3 Medium Oct 26, 2024
CVE-2022-4972 The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on… 7.5 High Oct 16, 2024
CVE-2024-8552 The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… 4.3 Medium Sep 26, 2024
CVE-2024-3269 The Download Monitor plugin for WordPress is vulnerable to unauthorized access to functionality due to a missing… 5.4 Medium May 30, 2024
CVE-2024-30501 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill Download… 7.6 High Mar 29, 2024
CVE-2022-45354 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue… 5.3 Medium Jan 8, 2024
CVE-2023-34007 Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download… 9.9 Critical Dec 20, 2023
CVE-2023-31219 Server-Side Request Forgery (SSRF) vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from… 4.1 Medium Nov 13, 2023
CVE-2021-23174 Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress… 3.4 Low Jan 28, 2022

Other wpchill products