WP Chill Download Monitor vulnerabilities

4 vulnerabilities

Known vulnerabilities in WP Chill Download Monitor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2026-110375wp chilldownload monitor
EPSS score
0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Download Monitor download-monitor allows Stored XSS.This issue affects Download Monitor: from n/a through 5.3.3.8.8CVE-2025-47439wordpressdownload-monitor+1
EPSS score
0.80%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Chill Download Monitor download-monitor allows PHP Local File Inclusion.This issue affects Download Monitor: from n/a through <= 5.0.22.4.4CVE-2026-39489wordpressdownload-monitor+1
EPSS score
0.37%
Author Arbitrary File Download in Download Monitor <= 5.1.9 versions.8.5CVE-2026-39486wordpressdownload-monitor+1
EPSS score
0.36%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through <= 5.1.8.