Download Monitor, CVE-2026-39486

CVE, Research URL: CVE-2026-39486
Home page URL: Security reports for Download Monitor
Application: Download Monitor
Published on: Apr 08, 2026
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through <= 5.1.8.
Affected versions: max 5.1.9.
Status: vulnerable