Simple Download Monitor

Vulnerabilities 24Slug simple-download-monitorLatest version 4.0.6WordPress.org →

Minimum safe version

4.0.6

Update to 4.0.6 or later to address 24 fixable vulnerabilities

Latest available4.0.6 ✓
N/A
2026-02-26< 4.0.6

Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field

WordfenceCVE
Medium 6.5
2025-08-28< 3.9.34

Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality

EUVDWordfenceCVE
N/A
< 3.2.9

Simple Download Monitor &lt;= 3.2.8 - Insufficient Authorisation

WPScan
N/A
< 3.9.6

Simple Download Monitor &lt; 3.9.6 - Unauthorised Log Reset

WPScan
N/A
2023-10-05< 3.9.6

WordPress Simple Download Monitor Plugin <= 3.9.5 is vulnerable to Broken Access Control

Patchstack
N/A
2023-10-05< 3.9.6

WordPress Simple Download Monitor Plugin <= 3.9.5 is vulnerable to Broken Access Control

Patchstack
N/A
2023-01-19< 3.2.9

WordPress Simple Download Monitor Plugin <= 3.2.8 is vulnerable to Bypass Vulnerability

Patchstack
N/A
2016-01-19< 3.2.9

Simple Download Monitor <= 3.2.8 - Missing Authorization

Wordfence
N/A
2021-10-05< 3.9.6

Simple Download Monitor <= 3.9.5 - Log Reset

Wordfence
N/A
2016-01-19< 3.2.9

WordPress Simple Download Monitor Plugin <= 3.2.8 - Insufficient Authorisation

Patchstack
N/A
2021-10-05< 3.9.6

WordPress Simple Download Monitor plugin <= 3.9.5 - Unauthorized Log Reset vulnerability

Patchstack