ED
Product
Easy Digital Downloads
58
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 5High 5Medium 46Low 2
Watch
Add Easy Digital Downloads to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-40005 | 9.8 | Dec 13 | Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… Affected: before 3.2.0 |
| CVE-2024-5057 | 9.8 | Aug 29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital… Affected: through 3.2.12 |
| CVE-2023-30869 | 9.8 | May 2 | Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth Affected: 3.1 before 3.1.1.4.2 |
| CVE-2022-3600 | 9.8 | Nov 21 | The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection Affected: before 3.1.0.2 |
| CVE-2015-9324 | 9.8 | Aug 16 | The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection Affected: before 2.3.3 |
| CVE-2024-43162 | 8.8 | Nov 1 | Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads:… Affected: before 3.3.0 |
| CVE-2026-42638 | 7.5 | Oct 6 | WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability Affected: through 3.7.1 |
| CVE-2026-39503 | 7.5 | Jun 15 | WordPress Easy Digital Downloads plugin <= 3.6.5 - Broken Access Control vulnerability Affected: through 3.6.5 |
| CVE-2022-2439 | 7.2 | Sep 24 | The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'upload[file]' parameter… Affected: before 3.3.4 |
| CVE-2022-33900 | 7.2 | Aug 22 | PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress Affected: through 3.0.1 |
| CVE-2015-9524 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9523 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9522 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9521 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9520 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9519 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) PDF Stamper extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9518 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9517 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9516 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9515 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) htaccess Editor extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9514 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Free Downloads extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9513 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9512 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9511 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9510 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Cross-sell Upsell extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9509 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Content Restriction extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9508 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Commissions extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9507 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9506 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9505 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9536 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9535 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9534 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9533 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9532 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9531 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9530 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Upload File extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9529 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9528 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9527 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Simple Shipping extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9526 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9525 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2019-15116 | 6.1 | Aug 16 | The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging Affected: before 2.9.16 |
| CVE-2026-116403 New | 5.9 | Oct 26 | WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability Affected: through 3.7.1 |
| CVE-2025-4670 | 5.4 | May 29 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's edd_receipt… Affected: before 3.3.9 |
| CVE-2023-51684 | 5.4 | Feb 1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads – Sell Digital Files (eCommerce… Affected: through 3.2.5 |
| CVE-2025-2252 | 5.3 | Mar 25 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… Affected: before 3.3.7 |
| CVE-2024-2302 | 5.3 | Apr 9 | The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Sensitive Information Exposure in all… Affected: before 3.2.10 |
| CVE-2024-12875 | 4.9 | Dec 21 | Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download Affected: before 3.3.3 |
| CVE-2024-0659 | 4.8 | Feb 5 | The Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the variable pricing… Affected: through 3.2.6 |