| Package | Affected versions | Patched versions |
|---|---|---|
| simple download monitor | < 3.9.9 | 3.9.9 |
The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to perform CSRF attacks to 1) make admins export logs to exploit a separate log disclosure vulnerability (fixed in 3.9.6), 2) delete logs (fixed in 3.9.9), 3) remove thumbnail image from downloads
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free