Easy Digital Downloads

9 CVEs across 2 Easy Digital Downloads products. Browse Easy Digital Downloads vulnerabilities, severities, and proof-of-concept exploits.

Easy Digital Downloads products with known CVEs

ProductCVEs
Easy Digital Downloads8
Easy Digital Downloads – Sell Digital Files (Ecommerce Store & Payments Made Easy)1
Easy Digital Downloads CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-43162Medium4.32024-11-01Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy D…
CVE-2024-5057Critical9.32024-08-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue af…
CVE-2024-32100Medium5.32024-05-14Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through…
CVE-2024-31113Medium4.32024-05-14Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.
CVE-2024-31293Medium4.32024-04-12Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.6.
CVE-2023-51684Medium6.52024-02-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads – Sell Digi…
CVE-2023-30869Critical9.82023-05-02Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1…
CVE-2022-33900Medium4.12022-08-22PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.
CVE-2021-39354Medium4.82021-10-21The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $start_date and $end_date parameters found in the ~/include…