CVE · Medium

CVE-2021-24698 — Simple Download Monitor [simple-download-monitor] < 3.9.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-24698 Simple Download Monitor [simple-download-monitor] < 3.9.6 Improper Access Control Medium 4.3 < 3.9.6 3.9.6 2021-10-05

CVE-2021-24698

The Simple Download Monitor plugin in versions prior to 3.9.6 contains a flaw that permits contributors and users with similarly limited privileges to delete thumbnails associated with downloads that belong to other users, despite lacking the ability to modify those downloads themselves.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.