mra13 Simple Download Monitor

• CVE-2026-2383 Medium 6.4 Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field 0.2%
• CVE-2025-8977 Medium 6.5 Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality 0.3%
• CVE-2025-58197 Medium 6.5 WordPress Simple Download Monitor Plugin <= 3.9.34 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-24663 High 7.6 WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability 0.6%