CVE-2021-23174

Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6 Vulnerable parameters: &posttitle, &downloadablefileversion0...

CVE-2021-23174

Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6 Vulnerable parameters: &posttitle, &downloadablefileversion0...

Arbitrary file deletion

Authenticated admin+ Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6. The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadablefileurls0 parameter data. It's also...

Cross site scripting

Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6 Vulnerable parameters: &posttitle, &downloadablefileversion0...

CVE-2021-31567 WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability

Authenticated admin+ Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6. The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadablefileurls0 parameter data. It's also...

CVE-2021-31567

CVE-2021-31567 affects the WordPress plugin Download Monitor (versions ≤ 4.4.6). An authenticated admin+ user can trigger an arbitrary file download via the parameter &downloadable_file_urls[0], enabling access to sensitive files (e.g., wp-config.php) and even escaping the web server home directo...

CVE-2021-31567 WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability

Authenticated admin+ Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6. The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadablefileurls0 parameter data. It's also...

CVE-2021-23174 WordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6 Vulnerable parameters: &posttitle, &downloadablefileversion0...

CVE-2021-23174 WordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6 Vulnerable parameters: &posttitle, &downloadablefileversion0...

CVE-2021-23174

CVE-2021-23174 affects the WordPress Download Monitor plugin for versions

WordPress Download Monitor 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. File Upload is a file upload plugin used in it. WordPress plugin is an application plugin. WordPress Download Monitor plugin version 4.4.6 and previous versions are vulnerable to arbitrary file download. stems from the fact that t...

WordPress plugin Download Monitor 跨站脚本漏洞

WordPress is a set of blogging platform developed using PHP language. File Upload is one of the file upload plugins used in it. WordPress plugin is an application plugin. The vulnerability is caused by the vulnerable parameters &posttitle, &downloadablefileversion0. An attacker could exploit this...

PT-2022-9372 · WordPress · Download Monitor

Name of the Vulnerable Software and Affected Versions: Download Monitor WordPress plugin versions = 4.4.6 Description: An Authenticated admin+ Persistent Cross-Site Scripting XSS issue was discovered. The vulnerable parameters are post title and downloadable file version0. Recommendations: For...

CVE-2021-44792

Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information...

CVE-2021-44792

Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information...

CVE-2021-44792

CVE-2021-44792 affects Single Connect via the log-monitor module, where an missing authorization check allows a remote attacker to access the logging interface and potentially obtain sensitive information. The NVD entry lists CVSS v3.1 base score 5.3 (Network, Low attack complexity, no privileges...

PT-2022-12233

Name of the Vulnerable Software and Affected Versions Single Connect affected versions not specified Description The issue is related to the lack of an authorization check in the log-monitor module, allowing a remote attacker to access the logging interface and potentially obtain sensitive...

Kron Single Connect 安全漏洞

Kron Single Connect is a comprehensive Privileged Access Management Pam software suite from Kron Turkey. It is designed to create a flexible, centrally managed and layered defense security architecture against insider threats. A security vulnerability exists in Kron Single Connect, which stems fr...

WordPress Simple Download Monitor plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. cross-site scripting vulnerability exists in versions prior to Wordpress Plugin Simple Download Monitor 3.9.11, which stems fr...

WordPress Simple Download Monitor plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. cross-site request forgery vulnerability exists in versions prior to Wordpress Plugin Simple Download Monitor 3.9.9, which...