CVE-2023-31219 MEDIUM

CVE-2023-31219: WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)

Vendor Wpchill

Product Download Monitor

Weakness CWE-918 · SSRF

Published November 13, 2023

Last update April 28, 2026

CVSS base score

4.1/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

Server-Side Request Forgery (SSRF) vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1.

Key dates

November 13, 2023 CVE published

April 28, 2026 Record updated

External resources

Related vulnerabilities