Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 17
Reset filtersSimple Download Monitor <= 3.9.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality
Simple Download Monitor <= 3.9.25 - Authenticated (Administrator+) SQL Injection
Simple Download Monitor <= 3.9.10 - Contributor+ Stored Cross-Site Scripting via Shortcodes
Simple Download Monitor <= 3.9.8 - Multiple Cross-Site Request Forgery vulnerabilities
Simple Download Monitor <= 3.9.4 - Reflected Cross-Site Scripting
Simple Download Monitor <= 3.9.5 - Log Reset
Simple Download Monitor <= 3.9.5 - Sensitive Data Exposure
Simple Download Monitor <= 3.9.5 - Contributor+ Arbitrary Thumbnail Removal
Simple Download Monitor <= 3.9.4 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
Simple Download Monitor <= 3.9.4 - Contributor+ Arbitrary File Download
Simple Download Monitor <= 3.8.8 - SQL Injection
Simple Download Monitor <= 3.8.8 - Unauthenticated Stored Cross-Site Scripting
Simple Download Monitor < 3.5.4 - Authenticated Stored Cross-Site Scripting
Simple Download Monitor < 3.5.4 - Authenticated Stored Cross-Site Scripting
Simple Download Monitor <= 3.2.8 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.