High severity · published Jan 24, 2022
CVE-2021-24696
Simple Download Monitor < 3.9.9 - Multiple CSRF
8.8
CVSS
0.6%
EPSS
No
On KEV
Description
The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to perform CSRF attacks to 1) make admins export logs to exploit a separate log disclosure vulnerability (fixed in 3.9.6), 2) delete logs (fixed in 3.9.9), 3) remove thumbnail image from downloads
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Simple Download Monitor ·
3.9.9 before 3.9.9 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-24696
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-24696
Exploit
https://wpscan.com/vulnerability/e94772af-39ac-4743-a556-52351ebda9fe
More from Simple Download Monitor
6.5
CVE-2021-24692
Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal
5.4
CVE-2021-24694
Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes