https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T04:24:31.466894+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24696 CVE-2021-24696 — Simple Download Monitor < 3.9.9 - Multiple CSRF 2026-10-27T04:24:31.468216+00:00

Affected: Unknown Simple Download Monitor

The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to perform CSRF attacks to 1) make admins export logs to exploit a separate log disclosure vulnerability (fixed in 3.9.6), 2) delete logs (fixed in 3.9.9), 3) remove thumbnail image from downloads