PT-2022-5019

Name of the Vulnerable Software and Affected Versions Download Monitor WordPress plugin versions prior to 4.5.98 Description The issue is related to insufficient protection of registration data, allowing a remote attacker to disclose protected information. High privilege users, such as admins, ca...

Arbitrary file deletion

Authenticated admin+ Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6. The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadablefileurls0 parameter data. It's also...

PT-2022-10037

Name of the Vulnerable Software and Affected Versions Download Monitor WordPress plugin versions = 4.4.6 Description The issue allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the downloadable file urls0 parameter data. It is also possibl...