WordPress Download Monitor Plugin <= 2.0.6 - SQL Injection

2008-04-3000:00:00

Dino Covotsos

patchstack.com

0.001 Low

EPSS

Percentile

49.8%

Because of this vulnerability in wp-download_monitor/download.php, the attackers can execute arbitrary SQL commands via the “id” parameter.

Solution

           Update the plugin.

CPENameOperatorVersion
download monitorle2.0.6

CPE	Name	Operator	Version
	download monitor	le	2.0.6

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2034

0.001 Low

EPSS

Percentile

49.8%

Related for PATCHSTACK:258B7E657C87F5ACCF8211813846C13C