Description

WordPress Plugin Download Monitor is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Download Monitor version 4.4.6 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 4.4.7 or latest

References

https://github.com/WPChill/download-monitor/blob/master/changelog.txt

Related Vulnerabilities

Jboss EAP Incorrect Authorization Vulnerability (CVE-2019-14843)

WordPress Plugin Watu Quiz Cross-Site Scripting (2.4.9)

Moodle Insertion of Sensitive Information into Log File Vulnerability (CVE-2018-10889)

PHP Other Vulnerability (CVE-2015-8835)

WordPress Plugin Event Notifier Cross-Site Scripting (1.2.0)

Severity

High

Tags

Missing Update