CVE-2021-24698

creationtimestamp| type| source ---|---|--- 2021-11-08 20:29:35+00:00| seen| https://t.me/cibsecurity/32002...

CVE-2021-24698

The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot normally edit the download...

CVE-2021-24698

CVE-2021-24698 affects the WordPress plugin Simple Download Monitor prior to version 3.9.6. The issue is an access-control weakness that lets users with a low role (as low as Contributor) remove thumbnails from downloads they do not own, without being able to edit those downloads. Affected compon...