CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2023-34007

WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

Status: Published
Published: 2023-12-20
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WPChill Download Monitor

Default version status: unaffected

n/a to ≤ 4.8.3affected

References

https://patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-8-3-arbitrary-file-upload-vulnerability?_s_id=cve ↗