https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T21:36:56.727325+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-112207 fkie_cve-2026-112207 2026-10-24T21:36:56.729801+00:00

The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site before fetching it client-side and rendering part of the response in the page, which allows unauthenticated attackers to execute arbitrary JavaScript in the browser of any user who is tricked into clicking a crafted link.

 https://db.gcve.eu/vuln/ghsa-q52q-7v6q-wrp3 GHSA-q52q-7v6q-wrp3 2026-10-24T21:36:56.729856+00:00

The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site before fetching it client-side and rendering part of the response in the page, which allows unauthenticated attackers to execute arbitrary JavaScript in the browser of any user who is tricked into clicking a crafted link.