CVE-2020-5651 — Simple Download Monitor [simple-download-monitor] < 3.8.9

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
CVE-2020-5651	Simple Download Monitor [simple-download-monitor] < 3.8.9	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	High 8.8	< 3.8.9	3.8.9	2020-10-21	—

CVE-2020-5651

WordPress Plugin "Simple Download Monitor" provided by Tips and Tricks HQ contains multiple vulnerabilities listed below. * Cross-site Scripting (CWE-79) - CVE-2020-5650 * SQL Injection (CWE-89) - CVE-2020-5651 Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to the developer and coordinated on his own. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.

Source: jvndb.jvn.jp

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)