WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-download-button-shortcode
Published
2014-08-01
Title
Simple Download Button Shortcode 1.0 - Remote File Disclosure
Slug
simple-download-button-shortcode
Published
2023-10-16
Title
simple-download-button-shortcode <= 1.1.1 - Sensitive Data Disclosure
Slug
simple-download-counter
Published
2023-09-08
Title
Simple Download Counter < 1.6.1 - Contributor+ Stored XSS
Slug
simple-download-counter
Published
2025-02-28
Title
Simple Download Counter < 2.1 - Authenticated (Author+) Arbitrary File Read
Slug
simple-download-counter
Published
2025-04-22
Title
Simple Download Counter < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-download-counter
Published
2025-12-09
Title
Simple Download Counter < 2.2.3 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal
Slug
simple-download-monitor
Published
2016-01-19
Title
Simple Download Monitor <= 3.2.8 - Insufficient Authorisation
Slug
simple-download-monitor
Published
2018-01-02
Title
Simple Download Monitor <= 3.5.3 - Authenticated Cross-Site Scripting (XSS)
Slug
simple-download-monitor
Published
2020-10-21
Title
Simple Download Monitor < 3.8.9 - Unauthenticated Cross-Site Scripting
Slug
simple-download-monitor
Published
2020-10-21
Title
Simple Download Monitor < 3.8.9 - SQL Injection
Slug
simple-download-monitor
Published
2021-10-05
Title
Simple Download Monitor < 3.9.6 - Unauthorised Log Reset
Slug
simple-download-monitor
Published
2021-10-05
Title
Simple Download Monitor < 3.9.6 - Unauthenticated Log Access
Slug
simple-download-monitor
Published
2021-10-05
Title
Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails Removal
Slug
simple-download-monitor
Published
2021-10-05
Title
Simple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting
Slug
simple-download-monitor
Published
2021-10-05
Title
Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
Slug
simple-download-monitor
Published
2021-12-21
Title
Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes
Slug
simple-download-monitor
Published
2021-12-21
Title
Simple Download Monitor < 3.9.9 - Multiple CSRF
Slug
simple-download-monitor
Published
2021-09-02
Title
Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal
Slug
simple-download-monitor
Published
2025-01-24
Title
Simple Download Monitor < 3.9.26 - Authenticated (Administrator+) SQL Injection
Slug
simple-download-monitor
Published
2025-08-27
Title
Simple Download Monitor < 3.9.34 - Simple Download Monitor < 3.9.34 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality
Slug
simple-download-monitor
Published
2025-08-27
Title
Simple Download Monitor < 3.9.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-downloads-list
Published
2025-01-23
Title
Simple Downloads List < 1.4.3 - Authenticated (Contributor+) SQL Injection
Slug
simple-downloads-list
Published
2025-11-07
Title
Simple Downloads List < 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
simple-draft-list
Published
2025-09-19
Title
Draft List < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simple-draft-list
Published
2025-10-10
Title
Draft List < 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting