Download Monitor vulnerabilities
We track 1 vulnerability in Download Monitor products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 24, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Download Monitor vulnerabilities
- 7.1 High severity
Download Monitor: Improper Neutralization of Input During Web Page Generation
The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site before fetching it client-side and rendering part of the response in the page, which allows unauthenticated attackers to execute arbitrary Jav