https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:22:04.203421+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-32218 cnvd-2026-32218 2026-10-07T22:22:04.206398+00:00 cnvd-2026-32218 https://cve.radiocsirt.org/vuln/euvd-2026-351240 EUVD-2026-351240 2026-10-07T22:22:04.206433+00:00 EUVD-2026-351240 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16608 fkie_cve-2026-16608 2026-10-07T22:22:04.206447+00:00

The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging AJAX actions, and exposes the nonce protecting it to unauthenticated visitors, allowing unauthenticated users to inject arbitrary download log entries and inflate a site's download statistics.

 https://cve.radiocsirt.org/vuln/ghsa-25m3-39mc-92qp GHSA-25m3-39mc-92qp 2026-10-07T22:22:04.206476+00:00

The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging AJAX actions, and exposes the nonce protecting it to unauthenticated visitors, allowing unauthenticated users to inject arbitrary download log entries and inflate a site's download statistics.