Download Monitor

83 Quality Score

Active Installs

22/30

With 80,000 active installs, Download Monitor has solid mid-tier adoption, though it sits well behind category leaders like WooCommerce at 7 million installs.

Update Freshness

25/25

The plugin was last updated in July 2026 and is actively maintained, earning a perfect maintenance score.

User Rating

14/15

A 90/100 rating across 523 reviews indicates strong, consistent user satisfaction with few complaints.

Support Health

8/15

All 12 support threads have been resolved, a 100% resolution rate that suggests responsive and effective support, though the low thread volume means the sample is small.

WP Compatibility

15/15

Tested with WordPress 6.9.4 and requiring PHP 7.4 or higher, the plugin has excellent compatibility with modern WordPress environments.

Scores higher than 91% of indexed plugins

About

Powerful Download Manager Plugin for WordPress

Active Installs 80k+

Rating ★★★★½ 4.5/5

Last Updated 2026-09-23 11:55am GMT

Requires WordPress 6.4+

Tested Up To 7.1.2

Requires PHP 7.4+

Security History

30 known vulnerabilities, all patched

1 Critical 7 High 22 Medium

Most recent: August 3, 2026

View details ▸

Download Monitor <= 5.2.5 - Missing Authorization Medium

August 3, 2026 Patched in ["5.2.6"] CVE-2026-16608

Download Monitor <= 5.1.9 - Authenticated (Author+) Arbitrary File Download Medium

April 20, 2026 Patched in ["5.1.10"] CVE-2026-39489

Download Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling Medium

April 7, 2026 Patched in ["5.1.11"] CVE-2026-4401

Download Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id' High

March 29, 2026 Patched in ["5.1.8"] CVE-2026-3124

Download Monitor <= 5.1.8 - Authenticated (Contributor+) SQL Injection Medium

March 25, 2026 Patched in ["5.1.9"] CVE-2026-39486

Download Monitor <= 5.0.22 - Authenticated (Contributor+) Local File Inclusion High

May 7, 2025 Patched in ["5.0.23"] CVE-2025-47439

Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure Medium

October 29, 2024 Patched in ["5.0.14"] CVE-2024-10399

Download Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation Medium

October 25, 2024 Patched in ["5.0.13"] CVE-2024-10092

Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable Medium

September 25, 2024 Patched in ["5.0.10"] CVE-2024-8552

Download Monitor <= 4.9.13 - Missing Authorization Medium

May 29, 2024 Patched in ["4.9.14"] CVE-2024-3269

Download Monitor <= 4.9.4 - Authenticated (Admin+) SQL Injection High

January 8, 2024 Patched in ["4.9.5"] CVE-2024-30501

Download Monitor <= 4.8.3 - Authenticated(Subscriber+) Arbitrary File Upload via upload_file High

June 7, 2023 Patched in ["4.8.4"] CVE-2023-34007

Download Monitor <= 4.8.1 - Authenticated (Admin+) Server-Side Request Forgery Medium

May 30, 2023 Patched in ["4.8.2"] CVE-2023-31219

Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API Medium

May 10, 2023 Patched in ["4.7.70"] CVE-2022-45354

Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export High

November 26, 2022 Patched in ["4.7.52"] CVE-2022-4972

Download Monitor <= 4.7.2 - Authenticated Directory Traversal to Sensitive Information Exposure Medium

November 1, 2022 Patched in ["4.7.3"]

Download Monitor <= 4.5.97 - Authenticated (Administrator+) Arbitrary File Download Medium

September 19, 2022 Patched in ["4.5.98"] CVE-2022-2981

Download Monitor <= 4.5.9 - Authenticated Arbitrary File Download Medium

June 27, 2022 Patched in ["4.5.91"] CVE-2022-2222

Download Monitor <= 4.4.6 - Reflected Cross-Site Scripting Medium

October 29, 2021 Patched in ["4.4.7"] CVE-2021-36920

Download Monitor <= 4.4.6 - Authenticated (Admin+) Arbitrary File Download Medium

October 29, 2021 Patched in ["4.4.7"] CVE-2021-31567

Download Monitor <= 4.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

October 29, 2021 Patched in ["4.4.7"] CVE-2021-23174

Download Monitor <= 4.4.4 - Admin+ SQL Injection via orderby parameter High

October 20, 2021 Patched in ["4.4.5"] CVE-2021-24786

Download Monitor <= 1.9.6 - Missing Authorization Medium

May 5, 2017 Patched in ["1.9.7"]

Download Monitor < 1.7.1 - Reflected Cross-Site Scripting Medium

April 20, 2015 Patched in ["1.7.1"] CVE-2015-9296

Download Monitor <= 1.6.4 - Reflected Cross-Site Scripting Medium

April 20, 2015 Patched in ["1.6.5","1.7.1"]

Download Monitor <= 1.6.3 - Directory Listing to Information Disclosure Medium

March 8, 2015 Patched in ["1.6.4"]

Download Monitor < 3.3.6.2 - Cross-Site Scripting via sort Parameter High

July 23, 2013 Patched in ["3.3.6.2"] CVE-2013-5098

Download Monitor < 3.3.6.2 - Cross-Site Scripting via p Parameter Medium

July 22, 2013 Patched in ["3.3.6.2"] CVE-2013-3262

Download Monitor <= 3.3.5.8 - Reflected Cross-Site Scripting Medium

September 6, 2012 Patched in ["3.3.5.9"] CVE-2012-4768

Download Monitor <= 2.0.6 - Unauthenticated SQL Injection Critical

April 28, 2008 Patched in ["2.0.9"] CVE-2008-2034

What It Does

Download Monitor is a WordPress plugin that lets you manage, track, and control file downloads from your site. It supports password protection, version management, and download logging, making it suitable for distributing digital products like eBooks, software, PDFs, and media files. The plugin integrates with e-commerce workflows for selling downloadable goods.

Who It's For

This plugin is best for site owners who need to distribute or sell digital files, such as software vendors, eBook authors, musicians, course creators, and digital storefronts. It fits well for businesses that want granular control over who can download files, how many times, and with what restrictions. Smaller sites that simply need to share a few PDFs with visitors may find it more powerful than necessary.

Who Should Skip It

If you only need to share occasional files or run a full e-commerce shop, this plugin is overkill; WooCommerce handles digital product sales more comprehensively for stores, and a simple file link is enough for basic needs. Sites running on PHP versions below 7.4 should also skip it.

The Bottom Line

Download Monitor delivers exactly what it promises: a focused, well-maintained download management solution with strong ratings and responsive support. It is not a full e-commerce suite, so shops already running WooCommerce will not benefit from adding it. For sites that need controlled, trackable file distribution without the overhead of a full storefront, it is a solid choice with an overall quality score of 90.46/100.

Related Plugins

WooCommerce 96/100

Choose WooCommerce if you need a full e-commerce platform with digital product support, payments, taxes, and shipping, rather than a dedicated download manager.

File Manager 88/100

Pick File Manager if you primarily need a web-based interface to browse, edit, and manage files on your server rather than distribute them to users.

Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation 87/100

Opt for OptinMonster if your goal is lead generation and email marketing rather than file distribution.

FileOrganizer – WordPress File Manager 86/100

FileOrganizer is a reasonable alternative if you want lighter-weight file management without the e-commerce and download-tracking focus.

Kadence Security – Password, Two Factor Authentication, and Brute Force Protection 86/100

Kadence Security is unrelated to downloads; consider it only if your real need is site security hardening.