High
CVE-2026-100182
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 48
Reset filters
Medium
CVE-2026-16608
Download Monitor <= 5.2.5 - Missing Authorization
Medium
CVE-2026-39489
Download Monitor <= 5.1.9 - Authenticated (Author+) Arbitrary File Download
Medium
CVE-2026-4401
Download Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling
High
CVE-2026-3124
Download Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'
Medium
CVE-2026-39486
Download Monitor <= 5.1.8 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-2383
Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Medium
CVE-2025-58197
Simple Download Monitor <= 3.9.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-8977
Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality
High
CVE-2025-47439
Download Monitor <= 5.0.22 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-24663
Simple Download Monitor <= 3.9.25 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-10399
Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-10092
Download Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation
Medium
CVE-2024-8552
Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable
Medium
CVE-2024-3269
Download Monitor <= 4.9.13 - Missing Authorization
High
CVE-2024-30501
Download Monitor <= 4.9.4 - Authenticated (Admin+) SQL Injection
High
CVE-2023-34007
Download Monitor <= 4.8.3 - Authenticated(Subscriber+) Arbitrary File Upload via upload_file
Medium
CVE-2023-31219
Download Monitor <= 4.8.1 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2022-45354
Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API
High
CVE-2022-4972
Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export
Medium
4f7fa5a4-07d7-4815-b393-871568777b0f
Download Monitor <= 4.7.2 - Authenticated Directory Traversal to Sensitive Information Exposure
Medium
CVE-2022-2981
Download Monitor <= 4.5.97 - Authenticated (Administrator+) Arbitrary File Download
Medium
CVE-2022-2222
Download Monitor <= 4.5.9 - Authenticated Arbitrary File Download
Medium
CVE-2021-24694
Simple Download Monitor <= 3.9.10 - Contributor+ Stored Cross-Site Scripting via Shortcodes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.