Every CVE whose affected-product data names Simple Download Monitor Project Simple Download Monitor, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2018-5212 — CVSS 5.4 (medium): The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an…
CVE-2018-5213 — CVSS 5.4 (medium): The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit…