{"vulnerability": "CVE-2026-110375", "sightings": [{"uuid": "fb462a19-92da-4098-801d-6fe05b57e4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-110375", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117446351270984612", "content": "CVE-2026-110375 WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Download Monitor download-monitor allows Stored XSS.This issue affects Download Monitor: from n/a through 5.3.3.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110375https://patchstack.com/database/wordpress/plugin/download-monitor/vulnerability/wordpress-download-monitor-plugin-5-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve#WPChill #DownloadMonitor#CVE_2026_110375#bot", "creation_timestamp": "2026-10-15T18:31:40.913598Z"}]}