CVE · Medium

CVE-2021-24692 — Simple Download Monitor [simple-download-monitor] < 3.9.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-24692 Simple Download Monitor [simple-download-monitor] < 3.9.5 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Medium 6.5 < 3.9.5 3.9.5 2021-09-02

CVE-2021-24692

The Simple Download Monitor plugin in versions before 3.9.5 contains a path traversal vulnerability that enables contributors and higher-privileged users to retrieve arbitrary files from the web server, including sensitive configuration files like wp-config.php.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.