ED
Product
Easy Digital Downloads
58
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 5High 5Medium 46Low 2
Watch
Add Easy Digital Downloads to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43162 | 8.8 | Nov 1 | Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads:… Affected: before 3.3.0 |
| CVE-2026-42638 | 7.5 | Oct 6 | WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability Affected: through 3.7.1 |
| CVE-2026-39503 | 7.5 | Jun 15 | WordPress Easy Digital Downloads plugin <= 3.6.5 - Broken Access Control vulnerability Affected: through 3.6.5 |
| CVE-2022-2439 | 7.2 | Sep 24 | The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'upload[file]' parameter… Affected: before 3.3.4 |
| CVE-2022-33900 | 7.2 | Aug 22 | PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress Affected: through 3.0.1 |
Showing 5