Approved changes feed: RSS · Atom

cpe:2.3:a:simple_download_monitor_project:simple_download_monitor:3.5.4:*:*:*:*:wordpress:*:*

part: a version: 3.5.4 update: *

VendorSimple Download Monitor Project (0236efcd-b4f1-54fc-9f4e-6848e795d1f4)
ProductSimple Download Monitor (1a540b81-4e0a-5a0f-b15f-2dc137b66b78)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/arsenal21/simple-download-monitor purl2cpe 2026-06-01 10:12:37.967997

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5213 vulnerable 2026-06-08 05:11:50.444442 Details available
The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action to wp-admin/post.php.
Published: 2018-01-04T18:00:00.000Z
Updated: 2024-08-05T05:26:47.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5212 vulnerable 2026-06-08 05:11:50.443868 Details available
The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an edit action to wp-admin/post.php.
Published: 2018-01-04T18:00:00.000Z
Updated: 2024-08-05T05:26:47.253Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.