Simple Download Monitor < 3.9.6 - Unauthorised Log Reset

The sdm_reset_log AJAX action of the plugin does not have any capability and CSRF checks, which could allow any authenticated user (such as subscriber), or an attacker performing a CSRF attack against a logged in admin to reset the log entries

https://example.com/wp-admin/admin-ajax.php?action=sdm_reset_log