Vulnerabilities and Security Researches

Simple Download Monitor, CVE-2021-24692

CVE, Research URL: CVE-2021-24692
Home page URL: Security reports for Simple Download Monitor
Application: Simple Download Monitor
Published on: Mar 14, 2022
Research Description: The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector.
Affected versions: max 3.9.5.
Status: vulnerable