The Download Monitor plugin for WordPress is not secure in versions up to 4.7.2. Someone with manage_downloads permissions can access sensitive information from files on the server that they shouldn’t have access to. It is important to update the Download Monitor plugin to the latest version to help prevent this vulnerability.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
