Read the docs

Sandhillsdev

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Sandhillsdev records in CISA KEV

No Sandhillsdev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Easy Digital Downloads 5 records HIGH

Records

5 records

TI-2023-09324 CVE-2023-23489 · GHSA-7745-326p-vhm6

SQL injection in Easy Digital Downloads WordPress Plugin

Priority HIGH 82

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edd_download_search' action.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11286 Published 2023-01-20 Fixed in 3.1.0.4 CWE-89
TI-2023-00364 CVE-2023-0380 · GHSA-gx84-73xf-rvpg

Easy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSS

Priority MEDIUM 58

The Easy Digital Downloads WordPress plugin before 3.1.0.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the cont…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00457 Published 2023-02-21 Fixed in 3.1.0.5
Open these records in search →