Skip to contentWpchill Download Monitor vulnerabilities
- wp chill download monitorDownload Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin EditorCVE-2026-1001827.2 High
- wp chill download monitorDownload Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and DisablingCVE-2026-44015.4 Medium
- wp chill download monitorDownload Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'CVE-2026-31247.5 High
- wp chill download monitorDownload Monitor <= 5.0.13 - Missing Authorization to Sensitive Information ExposureCVE-2024-103994.3 Medium
- wp chill download monitorDownload Monitor <= 5.0.12 - Missing Authorization to API Key ManipulationCVE-2024-100924.3 Medium
- wp chill download monitorDownload Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data ExportCVE-2022-49727.5 High
- wp chill download monitorDownload Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop EnableCVE-2024-85524.3 Medium
- wp chill download monitorDownload Monitor <= 4.9.13 - Missing AuthorizationCVE-2024-32695.4 Medium
- wp chill download monitorWordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerabilityCVE-2024-305017.6 High
- wp chill download monitorWordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data ExposureCVE-2022-45354Public exploitEPSS 38.1%5.3 Medium
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File UploadCVE-2023-340079.9 Critical
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-312194.1 Medium
- wp chill download monitorWordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2021-23174EPSS 83.9%3.4 Low
- wpchill download monitor, download monitor (wordpress plugin) +1 moreWordPress plugin Download Monitor <= 4.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilityCVE-2021-369204.8 Medium