Cpe:2.3:a:download_monitor:download_monitor:*:*:*:*:*:wordpress:*:*

The Download Monitor plugin for WordPress versions up to 5.2.10 is vulnerable to Stored Cross-Site Scripting via a malicious postMessage injection that executes when an administrator interacts with a compromised download object.