Plugin icon

Download Monitor

download-monitor

Vulnerabilities:

18

Last Updated:

March 25, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2026-03-29
Title
Download Monitor < 5.1.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'
Fixed in
Fixed in 5.1.8
CVSS
7.5 (high)
Published
2025-05-07
Title
Download Monitor < 5.0.23 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 5.0.23
CVSS
8.8 (high)
Published
2024-10-29
Title
Download Monitor < 5.0.14 - Missing Authorization to Sensitive Information Exposure
Fixed in
Fixed in 5.0.14
CVSS
4.3 (medium)
Published
2024-10-25
Title
Download Monitor < 5.0.13 - Missing Authorization to API Key Manipulation
Fixed in
Fixed in 5.0.13
CVSS
4.3 (medium)
Published
2024-09-25
Title
Download Monitor < 5.0.10 - Missing Authorization to Authenticated (Subscriber+) Shop Enable
Fixed in
Fixed in 5.0.10
CVSS
4.3 (medium)
Published
2024-05-29
Title
Download Monitor < 4.9.14 - Missing Authorization
Fixed in
Fixed in 4.9.14
CVSS
5.4 (medium)
Published
2024-01-08
Title
Download Monitor < 4.9.5 - Authenticated (Admin+) SQL Injection
Fixed in
Fixed in 4.9.5
CVSS
7.2 (high)
Published
2023-05-30
Title
Download Monitor < 4.8.2 - Admin+ SSRF
Fixed in
Fixed in 4.8.2
CVSS
4.1 (medium)
Published
2022-09-19
Title
Download Monitor < 4.5.98 - Admin+ Arbitrary File Download
Fixed in
Fixed in 4.5.98
CVSS
4.5 (medium)
Published
2022-04-05
Title
Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
Fixed in
Fixed in 4.5.91
CVSS
4.9 (medium)
Published
2022-01-14
Title
Download Monitor < 4.4.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.4.7
CVSS
6.1 (medium)
Published
2021-10-29
Title
Download Monitor < 4.4.7 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.4.7
CVSS
3.4 (low)
Published
2021-10-29
Title
Download Monitor < 4.4.7 - Admin+ Arbitrary File Download
Fixed in
Fixed in 4.4.7
CVSS
6.8 (medium)
Published
2021-10-20
Title
Download Monitor < 4.4.5 - Admin+ SQL Injection
Fixed in
Fixed in 4.4.5
CVSS
6.8 (medium)
Published
2017-05-05
Title
Download Monitor < 1.9.7 - Unauthenticated Downloading of Logs
Fixed in
Fixed in 1.9.7
CVSS
5.3 (medium)
Published
2015-04-20
Title
Download Monitor < 1.7.1 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.7.1
CVSS
6.1 (medium)
Published
2015-03-08
Title
Download Monitor < 1.6.4 - Authenticated Directory Listing
Fixed in
Fixed in 1.6.4
CVSS
4.3 (medium)
Published
2013-07-23
Title
Download Monitor < 3.3.6.2 - Multiple Reflected Cross-Site Scripting
Fixed in
Fixed in 3.3.6.2
CVSS
6.1 (medium)