PatchTheCVE: download monitorhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-4972: The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability chhttps://patchthecve.com/cve/CVE-2022-4972.htmlhttps://patchthecve.com/cve/CVE-2022-4972.htmlWed, 17 Jun 2026 05:22:27 +0000HIGH 7.5: The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive inforCVE-2024-8552: The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing https://patchthecve.com/cve/CVE-2024-8552.htmlhttps://patchthecve.com/cve/CVE-2024-8552.htmlWed, 17 Jun 2026 08:22:50 +0000MEDIUM 4.3: The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enable_shop() function in all versions up to, and including, 5.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to enaCVE-2024-30501: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill https://patchthecve.com/cve/CVE-2024-30501.htmlhttps://patchthecve.com/cve/CVE-2024-30501.htmlWed, 17 Jun 2026 07:27:04 +0000HIGH 7.6: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4.CVE-2022-45354: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issuhttps://patchthecve.com/cve/CVE-2022-45354.htmlhttps://patchthecve.com/cve/CVE-2022-45354.htmlWed, 17 Jun 2026 05:09:51 +0000MEDIUM 5.3: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60.CVE-2023-34007: Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Dhttps://patchthecve.com/cve/CVE-2023-34007.htmlhttps://patchthecve.com/cve/CVE-2023-34007.htmlWed, 17 Jun 2026 06:02:42 +0000CRITICAL 9.9: Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3.CVE-2023-31219: Server-Side Request Forgery (SSRF) vulnerability in WPChill Download Monitor.This issue affects Download Monithttps://patchthecve.com/cve/CVE-2023-31219.htmlhttps://patchthecve.com/cve/CVE-2023-31219.htmlWed, 17 Jun 2026 05:56:35 +0000MEDIUM 4.1: Server-Side Request Forgery (SSRF) vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1.