WordPress Simple Download Monitor Plugin <= 3.9.34 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Simple Download Monitor versions = 3.9.34...

CVE-2025-58197

CVE-2025-58197 is a stored XSS vulnerability in the WordPress plugin Simple Download Monitor (versions up to 3.9.34). The issue is caused by improper neutralization of input during web page generation, enabling stored cross-site scripting. Exploitation context across connected sources confirms af...

PT-2025-34913 · Unknown · Simple Download Monitor

Name of the Vulnerable Software and Affected Versions: Simple Download Monitor versions through 3.9.34 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations: Updat...