CVE-2021-36920

概要

参考情報

• patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-4-6-authenticated-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/download-monitor · Release Notes

download monitor のその他の脆弱性

• CVE-2022-4972高 7.5The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes…
• CVE-2024-8552中 4.3The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enable…
• CVE-2024-30501高 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill Download Monitor.This issue af…
• CVE-2022-45354高 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: fr…
• CVE-2023-34007高 8.8Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a thro…