Easy Digital Downloads

Records40All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Easy Digital Downloads records in CISA KEV

No Easy Digital Downloads vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Amazon S3 1 record LOW Attach Accounts To Orders 1 record LOW Commissions 1 record LOW Conditional Success Redirects 1 record LOW Content Restriction 1 record LOW Cross-sell And Upsell 1 record LOW Csv Manager 1 record LOW Digital Store 1 record LOW

Records

40 records

TI-2023-14647 CVE-2023-30869 · GHSA-49r3-jh88-8r77

WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation

MEDIUM 54

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.031 Published 2023-05-02 No fix listed CWE-287

TI-2024-04697 CVE-2024-5057 · GHSA-6qf3-9vph-fhj7

WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability

MEDIUM 53

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02588 Published 2024-08-29 No fix listed CWE-89

TI-2024-21177 CVE-2024-32100 · GHSA-5jhx-vpph-fr8r

WordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerability

MEDIUM 40

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2024-05-13 No fix listed CWE-200

TI-2024-28833 CVE-2024-43162 · GHSA-cv4m-7ph2-f339

WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.2.12.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00491 Published 2024-11-01 No fix listed CWE-862

TI-2024-20669 CVE-2024-31293 · GHSA-9r64-chx7-hchc

WordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2024-04-12 No fix listed CWE-352

TI-2024-20502 CVE-2024-31113 · GHSA-fvh8-9h4h-hc67

WordPress Easy Digital Downloads plugin <= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0022 Published 2024-05-10 No fix listed CWE-352

TI-2022-14907 CVE-2022-33900 · GHSA-262j-qv9g-9xhx

WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability

LOW 33

PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00916 Published 2022-08-22 No fix listed CWE-502

TI-2023-28331 CVE-2023-51684 · GHSA-v3x4-p7hr-w52x

WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) allows Store…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-02-01 No fix listed CWE-79

TI-2015-07913 CVE-2015-9536 · GHSA-8c4q-42pg-q857

The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD…

LOW 29

The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS b…