Same here, I also get a warning via our website monitoring tool:
“Download Monitor v1.9.4
Download Monitor 2.0.6 – wp-download_monitor/download.php id Parameter SQL Injection (Note: This plugin changed its version numbering, this may produce false positive)”
https://wpvulndb.com/vulnerabilities/6282
Please advise.
Thanks,
Joshua