SD
Product
Simple Download Monitor
4
CVEs
0
On KEV
7.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add Simple Download Monitor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24663 | 7.6 | Jan 24 | WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability Affected: through 3.9.25 |
| CVE-2025-8977 | 6.5 | Aug 28 | Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality Affected: through 3.9.33 |
| CVE-2025-58197 | 6.5 | Aug 27 | WordPress Simple Download Monitor Plugin <= 3.9.34 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.9.34 |
| CVE-2026-2383 | 6.4 | Feb 27 | Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field Affected: through 4.0.5 |
Showing 4