WPChill Download Monitor

• CVE-2026-100182 High 7.2 Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor 0.3%
• CVE-2026-4401 Medium 5.4 Download Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling 0.2%
• CVE-2026-3124 High 7.5 Download Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id' 0.3%
• CVE-2024-10399 Medium 4.3 Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure 0.4%
• CVE-2024-10092 Medium 4.3 Download Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation 0.5%
• CVE-2022-4972 High 7.5 Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export 0.5%
• CVE-2024-8552 Medium 4.3 Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable 0.4%
• CVE-2024-3269 Medium 5.4 Download Monitor <= 4.9.13 - Missing Authorization 0.3%
• CVE-2024-30501 High 7.6 WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability 0.6%
• CVE-2022-45354 Medium 5.3 WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure 38.1%
• CVE-2023-34007 Critical 9.9 WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload 0.9%
• CVE-2023-31219 Medium 4.1 WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF) 0.7%
• CVE-2021-23174 Low 3.4 WordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability 83.9%