Simple Download Monitor vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SD

Product

Simple Download Monitor

by · last CVE Mar 14, 2022

7

CVEs

0

On KEV

9.0

Max CVSS

0

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 1High 2Medium 4Low 0

Severity

All severities7 Critical1 High2 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Simple Download Monitor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-24693	9.0	1%	Nov 8	Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail Affected: 3.9.5 before 3.9.5
CVE-2021-24696	8.8	1%	Jan 24	Simple Download Monitor < 3.9.9 - Multiple CSRF Affected: 3.9.9 before 3.9.9
CVE-2021-24695	7.5	2%	Nov 8	Simple Download Monitor < 3.9.6 - Unauthenticated Log Access Affected: 3.9.6 before 3.9.6
CVE-2021-24692	6.5	1%	Mar 14	Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal Affected: 3.9.5 before 3.9.5
CVE-2021-24697	6.1	1%	Nov 8	Simple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting Affected: 3.9.5 before 3.9.5
CVE-2021-24694	5.4	1%	Jan 24	Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes Affected: 3.9.11 before 3.9.11
CVE-2021-24698	4.3	1%	Nov 8	Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails Removal Affected: 3.9.6 before 3.9.6