Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | Wordpress Download Monitor Plugin WordPress V 4.4.4 - SQL Injection (Authenticated) Exploit | 2 Feb 202200:00 | – | zdt |
 | CVE-2021-24786 | 3 Jan 202216:44 | – | circl |
 | WordPress plugin SQL注入漏洞 | 3 Jan 202200:00 | – | cnnvd |
 | WordPress Download Monitor PluginSQL Injection Vulnerability | 6 Jan 202200:00 | – | cnvd |
 | CVE-2021-24786 Download Monitor < 4.4.5 - Admin+ SQL Injection | 3 Jan 202212:49 | – | cvelist |
 | Wordpress Plugin Download Monitor WordPress V 4.4.4 - SQL Injection (Authenticated) | 2 Feb 202200:00 | – | exploitdb |
 | EUVD-2021-11698 | 7 Oct 202500:30 | – | euvd |
 | Download Monitor < 4.4.5 - SQL Injection | 6 Jun 202603:01 | – | nuclei |
 | CVE-2021-24786 | 3 Jan 202213:15 | – | nvd |
 | WordPress Download Monitor Plugin < 4.4.5 SQLi Vulnerability | 18 Jan 202200:00 | – | openvas |
10
Node
[
{
"product": "Download Monitor",
"vendor": "Unknown",
"versions": [
{
"lessThan": "4.4.5",
"status": "affected",
"version": "4.4.5",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| orderby | query param | wp-admin/edit.php?post_type=dlm_download&page=download-monitor-logs&orderby=download_date%60+and+%28select+%28sleep%2810%29%29%29+and+%60user_id | The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the \"orderby\" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue | CWE-89 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
22 May 2025 19:15Current
7.1High risk
Vulners AI Score7.1
CVSS 26.5
CVSS 3.17.2
EPSS0.02235
SSVC