ED
Product
Easy Digital Downloads
58
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 5High 5Medium 46Low 2
Watch
Add Easy Digital Downloads to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-40005 | 9.8 | Dec 13 | Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… Affected: before 3.2.0 |
| CVE-2024-5057 | 9.8 | Aug 29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital… Affected: through 3.2.12 |
| CVE-2023-30869 | 9.8 | May 2 | Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth Affected: 3.1 before 3.1.1.4.2 |
| CVE-2022-3600 | 9.8 | Nov 21 | The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection Affected: before 3.1.0.2 |
| CVE-2015-9324 | 9.8 | Aug 16 | The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection Affected: before 2.3.3 |
Showing 5