WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
download-monitor
Published
2024-10-25
Title
Download Monitor < 5.0.13 - Missing Authorization to API Key Manipulation
Slug
download-monitor
Published
2024-10-29
Title
Download Monitor < 5.0.14 - Missing Authorization to Sensitive Information Exposure
Slug
download-monitor
Published
2025-05-07
Title
Download Monitor < 5.0.23 - Authenticated (Contributor+) Local File Inclusion
Slug
download-monitor
Published
2026-03-29
Title
Download Monitor < 5.1.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'
Slug
download-monitor
Published
2026-04-07
Title
Download Monitor < 5.1.11 - Cross-Site Request Forgery to Download Path Deletion and Disabling
Slug
download-monitor
Published
2026-03-25
Title
Download Monitor < 5.1.9 - Authenticated (Contributor+) SQL Injection
Slug
download-monitor
Published
2026-04-20
Title
Download Monitor < 5.1.10 - Authenticated (Author+) Arbitrary File Download
Slug
download-monitor
Published
2026-08-03
Title
Download Monitor < 5.2.6 - Unauthenticated Download Log Injection
Slug
download-monitor
Published
2026-10-15
Title
Download Monitor < 5.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
download-monitor
Published
2026-10-01
Title
Download Monitor < 5.2.11 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor
Slug
download-monitor
Published
2026-10-21
Title
Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route
Slug
download-monitor
Published
2026-10-22
Title
Download Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download Link
Slug
download-monitor-integration-for-woocommerce
Published
2026-10-13
Title
Download Monitor integration for WooCommerce < 1.0.4 - Missing Authorization
Slug
download-now-for-woocommerce
Published
2024-03-13
Title
Free Downloads WooCommerce < 3.5.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
download-panel
Published
2025-11-17
Title
Download Panel <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification
Slug
download-plugin
Published
2021-10-19
Title
Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation
Slug
download-plugin
Published
2021-11-11
Title
Download Plugin < 2.0.0 - Subscriber+ Website Download
Slug
download-plugin
Published
2023-05-24
Title
Download < 2.0.5 - Cross-Site Request Forgery (CSRF)
Slug
download-plugin
Published
2024-10-22
Title
Download Plugin < 2.2.1 - Missing Authorization to Authenticated (Subscriber+) User Metadata and Comment Download
Slug
download-plugin
Published
2025-07-03
Title
Download Plugin < 2.2.9 - Authenticated (Administrator+) Arbitrary File Upload
Slug
download-plugins-dashboard
Published
2019-10-02
Title
Download Plugins and Themes from Dashboard < 1.6.0 - Unauthenticated Stored XSS
Slug
download-plugins-dashboard
Published
2024-05-17
Title
Download Plugins and Themes from Dashboard < 1.8.6 - Authenticated (Admin+) Arbitrary File Download
Slug
download-plugins-dashboard
Published
2024-08-15
Title
Download Plugins and Themes from Dashboard < 1.8.8 - Cross-Site Request Forgery
Slug
download-plugins-dashboard
Published
2024-10-10
Title
Download Plugins and Themes in ZIP from Dashboard < 1.9.2 - Reflected Cross-Site Scripting
Slug
download-plugins-dashboard
Published
2025-12-16
Title
Download Plugins and Themes from Dashboard < 1.9.7 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival