Skip to contentMra13 Simple Download Monitor vulnerabilities
- mra13 simple download monitorSimple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] ShortcodeCVE-2026-1186372.7 Low
- mra13 simple download monitorSimple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom FieldCVE-2026-23836.4 Medium
- mra13 simple download monitorSimple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionalityCVE-2025-89776.5 Medium
- mra13 simple download monitorWordPress Simple Download Monitor Plugin <= 3.9.34 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-581976.5 Medium
- mra13 simple download monitorWordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerabilityCVE-2025-246637.6 High
- mra13 simple download monitorSimple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path TraversalCVE-2021-246926.5 Medium
- mra13 simple download monitorSimple Download Monitor < 3.9.9 - Multiple CSRFCVE-2021-246968.8 High
- mra13 simple download monitorSimple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via ShortcodesCVE-2021-246945.4 Medium
- mra13 simple download monitorSimple Download Monitor < 3.9.6 - Arbitrary Thumbnails RemovalCVE-2021-246984.3 Medium
- mra13 simple download monitorSimple Download Monitor < 3.9.5 - Reflected Cross-Site ScriptingCVE-2021-246976.1 Medium
- mra13 simple download monitorSimple Download Monitor < 3.9.6 - Unauthenticated Log AccessCVE-2021-246957.5 High
- mra13 simple download monitorSimple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File ThumbnailCVE-2021-246939.0 Critical
- mra13 simple download monitorSQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers...CVE-2020-56518.8 High
- mra13 simple download monitorCross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote...CVE-2020-56506.1 Medium