Tipsandtricks-Hq Simple Download Monitor
9 CVEs affecting Tipsandtricks-Hq Simple Download Monitor. Latest disclosed: 2022-03-14. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24693 | Critical | 9.0 | 2021-11-08 | The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the "File Thumbnail" post meta before outputting it in some pages, which could allow… |
CVE-2021-24696 | High | 8.8 | 2022-01-24 | The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to perform CSRF attacks to 1) make admins… |
CVE-2020-5651 | High | 8.8 | 2020-10-21 | SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a specially crafted URL. |
CVE-2021-24695 | High | 7.5 | 2021-11-08 | The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place… |
CVE-2021-24692 | Medium | 6.5 | 2022-03-14 | The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any file on the web server (such as wp-con… |
CVE-2021-24697 | Medium | 6.1 | 2021-11-08 | The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the 1) sdm_active_tab GET parameter and 2) sdm_stats_start_date/sdm_stats_end_date PO… |
CVE-2020-5650 | Medium | 6.1 | 2020-10-21 | Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. |
CVE-2021-24694 | Medium | 5.4 | 2022-01-24 | The Simple Download Monitor WordPress plugin before 3.9.11 could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attack vi… |
CVE-2021-24698 | Medium | 4.3 | 2021-11-08 | The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, e… |