Exploit for Simple Download Monitor < 3.9.6 - Unauthenticated Log Access CVE-2021-24695

Name: Exploit for Simple Download Monitor < 3.9.6 - Unauthenticated Log Access CVE-2021-24695
Rating: 5 (253 reviews)

2021-10-05 | CVSS 5.0

## https://sploitus.com/exploit?id=WPEX-ID:D7BDAF2B-CDD9-4AEE-B1BB-01728160FF25
https://example.com/wp-content/plugins/simple-download-monitor/sdm-download-logs.csv

Note: if the file is not created yet, then the admin has to export logs first, then anyone can download the log. Exporting can also be done via the separate CSRF.