Lucene search
+L

394 matches found

Positive Technologies
Positive Technologies
added 2024/03/29 12:00 a.m.13 views

PT-2024-23428 · Unknown · Download Monitor

Name of the Vulnerable Software and Affected Versions: Download Monitor versions through 4.9.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicio...

7.6CVSS8.5AI score0.00609EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/03/28 12:00 a.m.18 views

WordPress Download Monitor Plugin <= 4.9.4 is vulnerable to SQL Injection

Software Download Monitor Type Plugin Vulnerable versions = 4.9.4 Fixed in 4.9.5 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30501 Patch priority Low CVSS severity Low 7.6 Developer WPChill PSID 3e76ad1985a5 Credits movrment Required privilege Administrator Published 28...

7.6CVSS6.9AI score0.00609EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2024/01/09 12:00 a.m.23 views

WordPress Download Monitor Plugin < 4.7.70 Information Disclosure Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpchill:downloadmonitor"; if description...

7.5CVSS6.4AI score0.38083EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/08 9:15 p.m.47 views

CVE-2022-45354

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...

7.5CVSS6.2AI score0.38083EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/08 9:15 p.m.22 views

CVE-2022-45354

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...

7.5CVSS6.6AI score0.38083EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/08 9:15 p.m.27 views

Design/Logic Flaw

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...

5CVSS7.1AI score0.38083EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/01/08 8:45 p.m.91 views

CVE-2022-45354

The CVE-2022-45354 entry concerns the WordPress plugin Download Monitor

7.5CVSS7.8AI score0.38083EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/08 8:45 p.m.16 views

CVE-2022-45354 WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...

5.3CVSS7.1AI score0.38083EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/08 8:45 p.m.43 views

CVE-2022-45354 WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...

5.3CVSS7.7AI score0.38083EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/01/08 12:00 a.m.7 views

WordPress Download Monitor Plugin < 4.9.5 is vulnerable to SQL Injection

Software Download Monitor Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE N/A Patch priority Low CVSS severity Low 7.2 Developer WPChill PSID 1be01d6b3a78 Credits WordFence Required privilege Administrator Published 8 January, 2024...

7.2AI score
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.8 views

WordPress Plugin Download Monitor Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.5CVSS8.2AI score0.38083EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/12/27 12:00 a.m.17 views

WordPress Download Monitor Plugin < 4.8.4 Arbitrary File Upload Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpchill:downloadmonitor"; if description...

9.9CVSS7AI score0.00906EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/20 7:15 p.m.22 views

CVE-2023-34007

Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...

9.9CVSS0.00906EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/20 7:15 p.m.26 views

CVE-2023-34007

Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...

8.8CVSS6.9AI score0.00906EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/20 7:15 p.m.20 views

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...

6.5CVSS7.2AI score0.00906EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/20 6:49 p.m.34 views

CVE-2023-34007 WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...

9.9CVSS9.7AI score0.00906EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/20 6:49 p.m.69 views

CVE-2023-34007

The CVE-2023-34007 entry concerns the WPChill WordPress Download Monitor plugin. Affected software is WordPress Download Monitor plugin versions

9.9CVSS8AI score0.00906EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/20 12:00 a.m.6 views

WordPress Plugin Download Monitor Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.9CVSS6.8AI score0.00906EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/13 3:15 a.m.29 views

CVE-2023-31219

Server-Side Request Forgery SSRF vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1...

4.9CVSS6.9AI score0.00653EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/13 3:15 a.m.27 views

CVE-2023-31219

Server-Side Request Forgery SSRF vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1...

4.9CVSS0.00653EPSS
SaveExploits0References1
Rows per page
Query Builder