Description

WordPress Plugin Download Monitor is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Download Monitor version 4.4.6 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 4.4.7 or latest

References

https://github.com/WPChill/download-monitor/blob/master/changelog.txt

Related Vulnerabilities

WordPress Plugin Side Menu Lite-add sticky fixed buttons SQL Injection (2.2.1)

Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-36806)

Drupal Core 8.x Multiple Security Bypass Vulnerabilities (8.0.0 - 8.3.6)

WordPress Plugin WordPress WP-Advanced-Search SQL Injection (3.3.6)

WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (3.9.1)

Severity

High

Tags

Missing Update