Approved changes feed: RSS · Atom

cpe:2.3:a:wp_chill:download_monitor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWp Chill (c87967c6-0b6d-5dd5-8fe3-9dfb084bfc47)
ProductDownload Monitor (09ce8337-e6a8-5ad5-9447-2dfc4dd67256)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39486 vulnerable 2026-06-03 15:22:12.642463 WordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through <= 5.1.8.
Published: 2026-04-08T08:30:11.488Z
Updated: 2026-04-29T09:52:01.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47439 vulnerable 2026-06-03 15:01:32.718181 WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Chill Download Monitor download-monitor allows PHP Local File Inclusion.This issue affects Download Monitor: from n/a through <= 5.0.22.
Published: 2025-05-07T14:19:30.638Z
Updated: 2026-04-28T16:12:40.906Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.