WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
download-monitor
Published
2021-10-29
Title
Download Monitor < 4.4.7 - Admin+ Stored Cross-Site Scripting
Slug
download-monitor
Published
2022-04-05
Title
Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
Slug
download-monitor
Published
2022-09-19
Title
Download Monitor < 4.5.98 - Admin+ Arbitrary File Download
Slug
download-monitor
Published
2023-05-30
Title
Download Monitor < 4.8.2 - Admin+ SSRF
Slug
download-monitor
Published
2024-01-08
Title
Download Monitor < 4.9.5 - Authenticated (Admin+) SQL Injection
Slug
download-monitor
Published
2024-05-29
Title
Download Monitor < 4.9.14 - Missing Authorization
Slug
download-monitor
Published
2024-09-25
Title
Download Monitor < 5.0.10 - Missing Authorization to Authenticated (Subscriber+) Shop Enable
Slug
download-monitor
Published
2024-10-25
Title
Download Monitor < 5.0.13 - Missing Authorization to API Key Manipulation
Slug
download-monitor
Published
2024-10-29
Title
Download Monitor < 5.0.14 - Missing Authorization to Sensitive Information Exposure
Slug
download-monitor
Published
2025-05-07
Title
Download Monitor < 5.0.23 - Authenticated (Contributor+) Local File Inclusion
Slug
download-now-for-woocommerce
Published
2024-03-13
Title
Free Downloads WooCommerce < 3.5.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
download-panel
Published
2025-11-17
Title
Download Panel <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification
Slug
download-plugin
Published
2021-10-19
Title
Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation
Slug
download-plugin
Published
2021-11-11
Title
Download Plugin < 2.0.0 - Subscriber+ Website Download
Slug
download-plugin
Published
2023-05-24
Title
Download < 2.0.5 - Cross-Site Request Forgery (CSRF)
Slug
download-plugin
Published
2024-10-22
Title
Download Plugin < 2.2.1 - Missing Authorization to Authenticated (Subscriber+) User Metadata and Comment Download
Slug
download-plugin
Published
2025-07-03
Title
Download Plugin < 2.2.9 - Authenticated (Administrator+) Arbitrary File Upload
Slug
download-plugins-dashboard
Published
2019-10-02
Title
Download Plugins and Themes from Dashboard < 1.6.0 - Unauthenticated Stored XSS
Slug
download-plugins-dashboard
Published
2024-05-17
Title
Download Plugins and Themes from Dashboard < 1.8.6 - Authenticated (Admin+) Arbitrary File Download
Slug
download-plugins-dashboard
Published
2024-08-15
Title
Download Plugins and Themes from Dashboard < 1.8.8 - Cross-Site Request Forgery
Slug
download-plugins-dashboard
Published
2024-10-10
Title
Download Plugins and Themes in ZIP from Dashboard < 1.9.2 - Reflected Cross-Site Scripting
Slug
download-plugins-dashboard
Published
2025-12-16
Title
Download Plugins and Themes from Dashboard < 1.9.7 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival
Slug
download-shortcode
Published
2014-08-01
Title
Download Shortcode - "file" Arbitrary File Disclosure
Slug
download-theme
Published
2023-05-24
Title
Download < 1.1.0 - Cross-Site Request Forgery
Slug
download-zip-attachments
Published
2015-06-10
Title
Download Zip Attachments <= 1.0 - Arbitrary File Download