WordPress plugin Download Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-11909 · WordPress · Download Monitor

Name of the Vulnerable Software and Affected Versions: Download Monitor plugin for WordPress versions up to, and including, 4.7.51 Description: The issue is related to a missing capability check on several REST-API routes, specifically those related to reporting, which allows unauthenticated...

CVE-2024-8552

The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableshop function in all versions up to, and including, 5.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2024-8552 Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable

The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableshop function in all versions up to, and including, 5.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2024-8552 Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable

The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableshop function in all versions up to, and including, 5.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2024-8552

CVE-2024-8552 affects WordPress Download Monitor plugin (versions

WordPress Download Monitor plugin <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable vulnerability

Missing Authorization to Authenticated Subscriber+ Shop Enable vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Download Monitor versions = 5.0.9...

WordPress Download Monitor Plugin <= 5.0.9 is vulnerable to Broken Access Control

Software Download Monitor Type Plugin Vulnerable versions = 5.0.9 Fixed in 5.0.10 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-8552 Patch priority Low CVSS severity Low 4.3 Developer WPChill PSID 665830fe1653 Credits Trương Hữu Phúc truonghuuphuc Requir...

WordPress plugin Download Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-39090 · WordPress · Download Monitor

Name of the Vulnerable Software and Affected Versions: Download Monitor plugin for WordPress versions up to, and including, 5.0.9 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify data without authorization due to a missing capability check on...

CVE-2024-3269

CVE-2024-3269 affects the WordPress plugin Download Monitor (WPChill). The vulnerability arises from a missing capability check in the dlm_uninstall_plugin function, allowing an authenticated user to uninstall the plugin and delete its data. Affected versions are all up to and including 4.9.13; t...

PT-2024-24776 · WordPress · Download Monitor

Name of the Vulnerable Software and Affected Versions: Download Monitor plugin for WordPress versions up to, and including, 4.9.13 Description: The issue allows unauthorized access to functionality due to a missing capability check on the dlm uninstall plugin function. This makes it possible for...

WordPress plugin Download Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Download Monitor plugin <= 4.9.13 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Download Monitor versions = 4.9.13...

CVE-2024-30501

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...

CVE-2024-30501

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...

CVE-2024-30501 WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...

CVE-2024-30501 WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...

CVE-2024-30501

The CVE-2024-30501 entry concerns WPChill’s Download Monitor plugin (WordPress) up to version 4.9.4, where an improper neutralization of SQL elements causes an SQL Injection. The vulnerability affects the plugin’s admin-facing code and can impact confidentiality, integrity, and availability as de...

WordPress Plugin Download Monitor SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...