PT-2026-31125 · WordPress · Wp Chill Download Monitor

Published 2026-04-08 · Updated 2026-04-12 · CVE-2026-39486

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions WP Chill Download Monitor versions through 5.1.8

Description An SQL Injection issue exists in WP Chill Download Monitor download-monitor, allowing Blind SQL Injection. The issue is due to improper neutralization of special elements used in an SQL command.

Recommendations Update WP Chill Download Monitor to a version later than 5.1.8.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-39486

Affected Products

Wp Chill Download Monitor

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-39486 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/download-monitor/vulnerability/wordpress-download-monitor-plugin-5-1-8-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2043368589412172198 · Twitter Post