CVE-2021-36920

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-4-6-authenticated-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/download-monitor · Release Notes

Lỗ hổng khác của download monitor

• CVE-2022-4972CAO 7.5The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes…
• CVE-2024-8552TRUNG BÌNH 4.3The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enable…
• CVE-2024-30501CAO 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill Download Monitor.This issue af…
• CVE-2022-45354CAO 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: fr…
• CVE-2023-34007CAO 8.8Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a thro…