Advisories · Technology

WP Chill Download Monitor.

Every CVE that names WP Chill Download Monitor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110375 CVE record

CVSS 6.5 Medium

WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
- WP Chill Download Monitor
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-39489 CVE record

CVSS 4.4 Medium

WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability
- WP Chill Download Monitor
- Path traversal
Not analysed yet 15 Jun 2026
CVE-2026-39486 CVE record

CVSS 8.5 High

WordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerability
- WP Chill Download Monitor
- SQL injection
Not analysed yet 8 Apr 2026
CVE-2025-47439 CVE record

CVSS 7.5 High

WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability
- WP Chill Download Monitor
- File inclusion
Not analysed yet 7 May 2025