Skip to content
Threat Feed
Subscribe

Tag

Download-Monitor

1 brief RSS
high advisory

Download Monitor WordPress Plugin Insecure Direct Object Reference

The Download Monitor plugin for WordPress is vulnerable to Insecure Direct Object Reference (IDOR) allowing unauthenticated attackers to steal paid digital goods by manipulating PayPal transaction tokens to complete arbitrary orders.

Download Monitor plugin wordpress plugin idor download-monitor cve-2026-3124
2r 1t