neofix
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Simple Downloads List | 2 | – | Nov 8, 2025 |
Exploited and recent CVEs
- CVE-2025-12583 Simple Downloads List <= 1.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
- CVE-2024-13594 Simple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL Injection 0.4%