Skip to contentWp Chill Download Monitor vulnerabilities
- unknown download monitorDownload Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download LinkCVE-2026-1122077.1 High
- unknown download monitorDownload Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST RouteCVE-2026-1122194.9 Medium
- wp chill download monitorWordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1103756.5 Medium
- wp chill download monitor integration for woocommerceWordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Broken Access Control vulnerabilityCVE-2026-1098964.3 Medium
- wp chill download monitorDownload Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin EditorCVE-2026-1001827.2 High
- unknown download monitorDownload Monitor < 5.2.6 - Unauthenticated Download Log InjectionCVE-2026-166085.3 Medium
- wp chill download monitorWordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerabilityCVE-2026-394894.4 Medium
- wp chill download monitorWordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerabilityCVE-2026-394868.5 High
- wp chill download monitorDownload Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and DisablingCVE-2026-44015.4 Medium
- wp chill download monitorDownload Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'CVE-2026-31247.5 High
- wp chill download monitorWordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion VulnerabilityCVE-2025-474397.5 High
- wp chill download monitorDownload Monitor <= 5.0.13 - Missing Authorization to Sensitive Information ExposureCVE-2024-103994.3 Medium
- wp chill download monitorDownload Monitor <= 5.0.12 - Missing Authorization to API Key ManipulationCVE-2024-100924.3 Medium
- wp chill download monitorDownload Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data ExportCVE-2022-49727.5 High
- wp chill download monitorDownload Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop EnableCVE-2024-85524.3 Medium
- wp chill download monitorDownload Monitor <= 4.9.13 - Missing AuthorizationCVE-2024-32695.4 Medium
- wp chill download monitorWordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerabilityCVE-2024-305017.6 High
- wp chill download monitorWordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data ExposureCVE-2022-45354Public exploitEPSS 38.1%5.3 Medium
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File UploadCVE-2023-340079.9 Critical
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-312194.1 Medium
- unknown download monitorDownload Monitor < 4.5.98 - Admin+ Arbitrary File DownloadCVE-2022-29814.9 Medium
- unknown download monitorDownload Monitor < 4.5.91 - Admin+ Arbitrary File DownloadCVE-2022-22224.9 Medium
- wp chill download monitorWordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2021-23174EPSS 83.9%3.4 Low
- unknown download monitorDownload Monitor < 4.4.5 - Admin+ SQL InjectionCVE-2021-24786Public exploitEPSS 17.3%7.2 High