Skip to content
OpenAdvisories

Vendor

Easy Digital Downloads

9 known vulnerabilities.

Products

Easy Digital Downloads 8 Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-43162

    WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.2.12.

    Easy Digital Downloads Easy Digital Downloads
  • Medium 5.3
    CVE-2024-32100

    WordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.

    Easy Digital Downloads Easy Digital Downloads
  • Medium 4.3
    CVE-2024-31113

    WordPress Easy Digital Downloads plugin <= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.

    Easy Digital Downloads Easy Digital Downloads
  • Medium 4.3
    CVE-2024-31293

    WordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.6.

    Easy Digital Downloads Easy Digital Downloads
  • Medium 6.5
    CVE-2023-51684

    WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) allows Stored XSS.This issue affects Easy Digital D…

    Easy Digital Downloads Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy)
  • Medium 4.1
    CVE-2022-33900

    WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability

    PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.

    Easy Digital Downloads Easy Digital Downloads
  • Medium 4.8
    CVE-2021-39354

    Easy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site Scripting

    The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $start_date and $end_date parameters found in the ~/includes/admin/payments/class-payments-table.php file which allows attackers to inject arbitrary web script…

    Easy Digital Downloads Easy Digital Downloads Web / CMS