WPChill Download Monitor vulnerabilities
13 published CVEs name WPChill Download Monitor among the affected products.
- 13Published CVEs13 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-100182
Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor
wpchill · Download Monitor
High7.2 - CVE-2026-4401
Download Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling
wpchill · Download Monitor
Medium5.4 - CVE-2026-3124
Download Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'
wpchill · Download Monitor
High7.5 - CVE-2024-10399
Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure
wpchill · Download Monitor
Medium4.3 - CVE-2024-10092
Download Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation
wpchill · Download Monitor
Medium4.3 - CVE-2022-4972
Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export
wpchill · Download Monitor
High7.5 - CVE-2024-8552
Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable
wpchill · Download Monitor
Medium4.3 - CVE-2024-3269
Download Monitor <= 4.9.13 - Missing Authorization
wpchill · Download Monitor
Medium5.4 - CVE-2024-30501
WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability
WPChill · Download Monitor
High7.6 - CVE-2022-45354
WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure
WPChill · Download Monitor
Medium5.3