CVE Database /
CVE-2026-16608
CVE
CVE-2026-16608 — Download Monitor [download-monitor] < 5.2.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-16608
|
Download Monitor [download-monitor] < 5.2.6 |
Missing Authorization |
Unknown
|
< 5.2.6
|
5.2.6 |
2026-08-03 |
—
|
CVE-2026-16608
A security flaw in the Download Monitor WordPress plugin prior to version 5.2.6 allows unauthorized individuals to manipulate download logs by exploiting an unprotected AJAX action, which can be triggered without authentication. This vulnerability enables malicious actors to artificially inflate a website's download statistics. Affected sites may experience inaccurate tracking of downloads due to this issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings