ED
Product
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
9
CVEs
0
On KEV
7.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 7Low 0
Watch
Add Easy Digital Downloads – eCommerce Payments and Subscriptions made easy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14335 | 7.2 | Oct 10 | Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parameters Affected: through 3.6.9 |
| CVE-2026-12476 | 7.2 | Jul 29 | Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter Affected: through 3.6.9 |
Showing 2