CVE-2021-24698
Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails Removal
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Nov 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot normally edit the download.
Affected products
Unknown · Simple Download MonitorWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →