ED
Product
Easy Digital Downloads
58
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 5High 5Medium 46Low 2
Watch
Add Easy Digital Downloads to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0706 | 4.8 | Apr 18 | Easy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site Scripting Affected: before 2.11.6 |
| CVE-2021-39354 | 4.8 | Oct 21 | Easy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site Scripting Affected: through 2.11.2 |
| CVE-2022-2387 | 4.3 | Nov 7 | Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF Affected: before 3.0 |
| CVE-2022-0707 | 4.3 | Apr 18 | Easy Digital Downloads < 2.11.6 - Arbitrary Payment Note Insertion via CSRF Affected: before 2.11.6 |
| CVE-2024-13517 | 4.0 | Jan 18 | Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Title Affected: before 3.3.3 |
| CVE-2024-6691 | 4.0 | Aug 10 | Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settings Affected: before 3.3.3 |
| CVE-2024-9654 | 3.7 | Dec 17 | Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass Affected: 3.1 before 3.3.5 |
| CVE-2024-6692 | 3.1 | Aug 10 | Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text Affected: before 3.3.3 |