ED
Product
Easy Digital Downloads
58
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 5High 5Medium 46Low 2
Watch
Add Easy Digital Downloads to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-40005 | 9.8 | Dec 13 | WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control Affected: before 3.2.0 |
| CVE-2024-5057 | 9.8 | Aug 29 | WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability Affected: through 3.2.12 |
| CVE-2023-30869 | 9.8 | May 2 | WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation Affected: 3.1 before 3.1.1.4.2 |
| CVE-2022-3600 | 9.8 | Nov 21 | Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection Affected: before 3.1.0.2 |
| CVE-2015-9324 | 9.8 | Aug 16 | The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection Affected: before 2.3.3 |
| CVE-2024-43162 | 8.8 | Nov 1 | WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability Affected: before 3.3.0 |
| CVE-2026-42638 | 7.5 | Oct 6 | WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability Affected: through 3.7.1 |
| CVE-2026-39503 | 7.5 | Jun 15 | WordPress Easy Digital Downloads plugin <= 3.6.5 - Broken Access Control vulnerability Affected: through 3.6.5 |
| CVE-2022-2439 | 7.2 | Sep 24 | Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserialization Affected: before 3.3.4 |
| CVE-2022-33900 | 7.2 | Aug 22 | WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability Affected: through 3.0.1 |
| CVE-2015-9505 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9506 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9507 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9508 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Commissions extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9509 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Content Restriction extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9510 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Cross-sell Upsell extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9511 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9512 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9513 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9514 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Free Downloads extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9515 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) htaccess Editor extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9516 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9517 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9518 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9519 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) PDF Stamper extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9520 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9521 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9522 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9523 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9524 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9525 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9526 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9527 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Simple Shipping extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9528 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9529 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9530 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Upload File extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9531 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9532 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9533 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9534 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9,… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9535 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2015-9536 | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… Affected: 1.8 before 1.8.7; 1.9 before 1.9.10; 2.0 before 2.0.5; 2.1 before 2.1.11; 2.2 before 2.2.9; 2.3 before 2.3.7 |
| CVE-2019-15116 | 6.1 | Aug 16 | The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging Affected: before 2.9.16 |
| CVE-2026-116403 New | 5.9 | Oct 26 | WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability Affected: through 3.7.1 |
| CVE-2025-4670 | 5.4 | May 29 | Easy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode Affected: before 3.3.9 |
| CVE-2023-51684 | 5.4 | Feb 1 | WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS) Affected: through 3.2.5 |
| CVE-2025-2252 | 5.3 | Mar 25 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure Affected: before 3.3.7 |
| CVE-2024-2302 | 5.3 | Apr 9 | Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure Affected: before 3.2.10 |
| CVE-2024-12875 | 4.9 | Dec 21 | Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download Affected: before 3.3.3 |
| CVE-2024-0659 | 4.8 | Feb 5 | Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options Affected: through 3.2.6 |