Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-46240 EUVD-2025-12308GHSA-g8xh-7qqw-v35m

WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability

Published Apr 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple Download Counter simple-download-counter allows Stored XSS.This issue affects Simple Download Counter: from n/a through <= 2.2.

Affected products

VendorProductAffectedFixed
Jeff Starr Simple Download Counter ≤ 2.2 —

References