Advisories · Technology

Simple Download Monitor.

Every CVE that names Simple Download Monitor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118637 CVE record

CVSS 2.7 Low

Simple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] Shortcode
- Simple Download Monitor
- Information disclosure
Not analysed yet 4 Nov 2026
CVE-2021-24692 CVE record

Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal
- Simple Download Monitor
- Path traversal
Not analysed yet 14 Mar 2022
CVE-2021-24696 CVE record

Simple Download Monitor < 3.9.9 - Multiple CSRF
- Simple Download Monitor
- Cross-site request forgery (CSRF)
Not analysed yet 24 Jan 2022
CVE-2021-24694 CVE record

Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes
- Simple Download Monitor
- Cross-site scripting (XSS)
Not analysed yet 24 Jan 2022
CVE-2021-24698 CVE record

Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails Removal
- Simple Download Monitor
- Broken access control
Not analysed yet 8 Nov 2021
CVE-2021-24697 CVE record

Simple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting
- Simple Download Monitor
- Cross-site scripting (XSS)
Not analysed yet 8 Nov 2021
CVE-2021-24695 CVE record

Simple Download Monitor < 3.9.6 - Unauthenticated Log Access
- Simple Download Monitor
- Broken access control
Not analysed yet 8 Nov 2021
CVE-2021-24693 CVE record

Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
- Simple Download Monitor
- Cross-site scripting (XSS)
Not analysed yet 8 Nov 2021