Unrated severityNVD Advisory· Published Jan 28, 2022· Updated Apr 28, 2026

WordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

CVE-2021-23174

Description

Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6) Vulnerable parameters: &post_title, &downloadable_file_version[0].

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Download Monitorllm-fuzzy
Range: <=4.4.6
Package: https://wordpress.org/plugins/download-monitor
Wpchill/Download Monitorcpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-4-6-authenticated-persistent-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.067
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000