Product by WPChill

    Download Monitor

    18 known vulnerabilities in Download Monitor (WPChill), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Download Monitor (WPChill)
    HighCVE-2021-24786

    Download Monitor < 4.4.5 - Admin+ SQL Injection

    		7.2
    HighCVE-2022-45354

    WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure

    		5.3
    MediumCVE-2021-23174

    WPChill Download Monitor: Cross-site Scripting

    		3.4
    CriticalCVE-2023-34007

    WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

    		9.9
    MediumCVE-2021-31567

    WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability

    		6.8
    HighCVE-2026-100182

    WPChill Download Monitor: Cross-site Scripting

    		7.2
    HighCVE-2024-30501

    WPChill Download Monitor: SQL Injection

    		7.6
    MediumCVE-2022-2222

    Download Monitor < 4.5.91 - Admin+ Arbitrary File Download

    		4.9
    MediumCVE-2022-2981

    Download Monitor < 4.5.98 - Admin+ Arbitrary File Download

    		4.9
    HighCVE-2022-4972

    Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export

    		7.5
    HighCVE-2026-3124

    WPChill Download Monitor: Authorization Bypass Through User-Controlled Key

    		7.5
    MediumCVE-2023-31219

    WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)

    		4.1
    MediumCVE-2021-36920

    WPChill Download Monitor (WordPress plugin): Cross-site Scripting

    		4.8
    MediumCVE-2026-4401

    Download Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling

    		5.4
    MediumCVE-2024-10092

    Download Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation

    		4.3
    MediumCVE-2024-10399

    Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure

    		4.3
    MediumCVE-2024-3269

    Download Monitor <= 4.9.13 - Missing Authorization

    		5.4
    MediumCVE-2024-8552

    Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable

    		4.3

    All products by WPChill