specialk Simple Download Counter

• CVE-2026-4278 Medium 6.4 Simple Download Counter <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute 0.2%
• CVE-2025-13677 Medium 4.9 Simple Download Counter <= 2.2.2 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal 0.5%
• CVE-2025-1730 Medium 6.5 Simple Download Counter <= 2.0 - Authenticated (Author+) Arbitrary File Read 0.4%
• CVE-2023-4838 Medium 6.4 The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.6 due to insufficient input sanitization a 0.4%