Beveiligingsadvies

CVE-2026-16608

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-08 06:00:12

Laatst bijgewerkt 2026-08-11 19:37:56

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging AJAX actions, and exposes the nonce protecting it to unauthenticated visitors, allowing unauthenticated users to inject arbitrary download log entries and inflate a site's download statistics.

← Alle CVE's bekijken Bekijk op cve.org ↗