Medium · 4.8 CVE-2021-36920 EUVD-2021-23496GHSA-6vjf-f548-f65r

WordPress plugin Download Monitor <= 4.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Published Jan 14, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WordPress plugin Download Monitor (versions <= 4.4.6).

Vendor	Product	Affected	Fixed
WPChill	Download Monitor (WordPress plugin)	<= 4.4.6 – ≤ 4.4.6	—