CVE-2021-36920

Description

References

• patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-4-6-authenticated-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/download-monitor · Release Notes

Weitere Schwachstellen in download monitor

• CVE-2022-4972HOCH 7.5The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes…
• CVE-2024-8552MITTEL 4.3The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enable…
• CVE-2024-30501HOCH 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill Download Monitor.This issue af…
• CVE-2022-45354HOCH 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: fr…
• CVE-2023-34007HOCH 8.8Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a thro…