Filtered by vendor Download Monitor
Subscriptions
Filtered by product Download Monitor
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-16608 | 2 Download Monitor, Wordpress | 2 Download Monitor, Wordpress | 2026-08-13 | 5.3 Medium |
| The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging AJAX actions, and exposes the nonce protecting it to unauthenticated visitors, allowing unauthenticated users to inject arbitrary download log entries and inflate a site's download statistics. | ||||
Page 1 of 1.