WPChill Download Monitor vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20232
3. 20247
4. 20263

Newest CVEs

• CVE-2026-100182

  Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor

  wpchill · Download Monitor

  High7.2
• CVE-2026-4401

  Download Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling

  wpchill · Download Monitor

  Medium5.4
• CVE-2026-3124

  Download Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'

  wpchill · Download Monitor

  High7.5
• CVE-2024-10399

  Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure

  wpchill · Download Monitor

  Medium4.3
• CVE-2024-10092

  Download Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation

  wpchill · Download Monitor

  Medium4.3
• CVE-2022-4972

  Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export

  wpchill · Download Monitor

  High7.5
• CVE-2024-8552

  Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable

  wpchill · Download Monitor

  Medium4.3
• CVE-2024-3269

  Download Monitor <= 4.9.13 - Missing Authorization

  wpchill · Download Monitor

  Medium5.4
• CVE-2024-30501

  WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability

  WPChill · Download Monitor

  High7.6
• CVE-2022-45354

  WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure

  WPChill · Download Monitor

  Medium5.3