1. Home
  2. CVE Database
  3. CVE-2021-24695
HIGH · 7.5

CVE-2021-24695

The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to downl...

Vulnerability Description

The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to download and read the logs containing Sensitive Information such as IP Addresses and Usernames

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Tipsandtricks-HqSimple Download Monitor< 3.9.5

Related Weaknesses (CWE)

CWE-425

References

FAQ

What is CVE-2021-24695?

CVE-2021-24695 is a vulnerability with a CVSS score of 7.5 (HIGH). The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to downl...

How severe is CVE-2021-24695?

CVE-2021-24695 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-24695?

Check the references section above for vendor advisories and patch information. Affected products include: Tipsandtricks-Hq Simple Download Monitor.