Awesomemotive

Records72All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Awesomemotive records in CISA KEV

TI-2020-09427 WordPress Snap Creek Duplicator Plugin File Download Vulnerability CRITICAL 90KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Easy Digital Downloads 55 records HIGH Duplicator 8 records CRITICAL Wp Mail Logging 1 record LOW

Records

55 records in Easy Digital Downloads · all components

TI-2022-03313 CVE-2022-3600 · GHSA-w3w2-8hq7-8fmw

Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection

HIGH 82

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01341 Published 2022-11-21 Fixed in 3.1.0.2

TI-2023-14647 CVE-2023-30869 · GHSA-49r3-jh88-8r77

WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation

MEDIUM 54

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.031 Published 2023-05-02 No fix listed CWE-287

TI-2024-04697 CVE-2024-5057 · GHSA-6qf3-9vph-fhj7

WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability

MEDIUM 53

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02588 Published 2024-08-29 No fix listed CWE-89

TI-2022-02203 CVE-2022-2387 · GHSA-pr89-cv9w-3vj3

Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF

MEDIUM 53

The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00348 Published 2022-11-07 Fixed in 3.0 CWE-352

TI-2023-20897 CVE-2023-40005 · GHSA-485q-m5hh-2rqx

WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control

MEDIUM 49

Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0064 Published 2024-12-13 No fix listed CWE-862

TI-2015-07701 CVE-2015-9324 · GHSA-xgfv-8qh2-7gwx

The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.

MEDIUM 46

The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01953 Published 2019-08-16 No fix listed CWE-89

TI-2024-28833 CVE-2024-43162 · GHSA-cv4m-7ph2-f339

WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.2.12.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00491 Published 2024-11-01 No fix listed CWE-862

TI-2022-02253 CVE-2022-2439 · GHSA-jjqr-925q-xr8x

Deserialization of untrusted data in smub Easy Digital Downloads – eCommerce Payments and…

LOW 35

The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'upload[file]' parameter in versions up to, and including 3.3.3.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0069 Published 2024-09-24 No fix listed CWE-502

TI-2022-14907 CVE-2022-33900 · GHSA-262j-qv9g-9xhx

WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability

LOW 33

PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00905 Published 2022-08-22 No fix listed CWE-502

TI-2024-02139 CVE-2024-2302 · GHSA-665w-fpf3-c2hw

Sensitive information in log files in smub Easy Digital Downloads – eCommerce Payments…

LOW 31

The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00603 Published 2024-04-09 No fix listed CWE-532

TI-2023-28331 CVE-2023-51684 · GHSA-v3x4-p7hr-w52x

WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) allows Store…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-02-01 No fix listed CWE-79

TI-2019-11287 CVE-2019-15116 · GHSA-6ppc-pp63-j479

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.

LOW 29

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00971 Published 2019-08-16 No fix listed CWE-79

TI-2015-07913 CVE-2015-9536 · GHSA-8c4q-42pg-q857

The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD…

LOW 29

The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS b…