Download Monitor, 46ca7cde9bef3abc841ab15d24d25f29bc88cd2b

CVE, Research URL: 46ca7cde9bef3abc841ab15d24d25f29bc88cd2b
Home page URL: Security reports for Download Monitor
Application: Download Monitor
Published on: May 05, 2017
Research Description: Download Monitor [download-monitor] < 1.9.7 Download Monitor <= 1.9.6 - Missing Authorization The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the delete_logs() and export_logs() functions in versions up to, and including, 1.9.6. This makes it possible for unauthenticated attackers to delete and export several log types.
Affected versions: max 1.9.7.
Status: vulnerable