<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wpchill-download-monitor</title><description>Every new CVE for wpchill-download-monitor.</description><link>https://agentprime.io/</link><item><title>CVE-2026-100182: Download Monitor &lt;= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor</title><link>https://agentprime.io/advisories/CVE-2026-100182/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100182/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Oct 2026 07:39:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-4401: Download Monitor &lt;= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling</title><link>https://agentprime.io/advisories/CVE-2026-4401/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4401/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Apr 2026 23:25:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3124: Download Monitor &lt;= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via &apos;token&apos; and &apos;order_id&apos;</title><link>https://agentprime.io/advisories/CVE-2026-3124/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3124/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Mar 2026 01:24:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10399: Download Monitor &lt;= 5.0.13 - Missing Authorization to Sensitive Information Exposure</title><link>https://agentprime.io/advisories/CVE-2024-10399/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10399/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Oct 2024 05:32:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10092: Download Monitor &lt;= 5.0.12 - Missing Authorization to API Key Manipulation</title><link>https://agentprime.io/advisories/CVE-2024-10092/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10092/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Oct 2024 07:36:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-4972: Download Monitor &lt;= 4.7.51 - Missing Authorization to Unauthenticated Data Export</title><link>https://agentprime.io/advisories/CVE-2022-4972/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-4972/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Oct 2024 06:43:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-8552: Download Monitor &lt;= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable</title><link>https://agentprime.io/advisories/CVE-2024-8552/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-8552/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Sep 2024 02:03:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3269: Download Monitor &lt;= 4.9.13 - Missing Authorization</title><link>https://agentprime.io/advisories/CVE-2024-3269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3269/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 May 2024 03:34:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-30501: WordPress Download Monitor theme &lt;= 4.9.4 - Auth. SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-30501/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-30501/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Mar 2024 14:06:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45354: WordPress Download Monitor Plugin &lt;= 4.7.60 is vulnerable to Sensitive Data Exposure</title><link>https://agentprime.io/advisories/CVE-2022-45354/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45354/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Jan 2024 20:45:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-34007: WordPress Download Monitor Plugin &lt;= 4.8.3 is vulnerable to Arbitrary File Upload</title><link>https://agentprime.io/advisories/CVE-2023-34007/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-34007/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Dec 2023 18:49:45 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-31219: WordPress Download Monitor Plugin &lt;= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)</title><link>https://agentprime.io/advisories/CVE-2023-31219/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-31219/</guid><description>CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Nov 2023 02:24:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-23174: WordPress Download Monitor plugin &lt;= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2021-23174/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-23174/</guid><description>CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jan 2022 19:09:52 GMT</pubDate><category>CVE</category></item></channel></rss>