← back
CVE-2021-24698

Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails Removal

EPSS 0.7%CWE-284
The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot normally edit the download.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →