Vulnerability index

Browse CVEs

54 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Easy Digital Downloads MEDIUM 5.4
CVE-2025-4670

The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…

Fix: 3.3.9+
Fix from $1,600 2025-05-29
Easy Digital Downloads MEDIUM 5.3
CVE-2025-2252

The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in a…

Fix: 3.3.7+
Fix from $1,600 2025-03-25
Easy Digital Downloads CRITICAL 9.8
CVE-2023-40005

Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Cont…

Fix: 3.2.0+
Fix from $2,300 2024-12-13
Easy Digital Downloads HIGH 8.8
CVE-2024-43162

Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…

Fix: 3.3.0+
Fix from $1,950 2024-11-01
Easy Digital Downloads HIGH 7.2
CVE-2022-2439

The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via …

Fix: 3.3.4+
Fix from $1,950 2024-09-24
Easy Digital Downloads CRITICAL 9.8
CVE-2024-5057

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.Thi…

Fix: after 3.2.12
Fix from $2,300 2024-08-29
Easy Digital Downloads MEDIUM 5.3
CVE-2024-2302

The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Sensitiv…

Fix: 3.2.10+
Fix from $1,600 2024-04-09
Easy Digital Downloads MEDIUM 5.4
CVE-2023-51684

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads –…

Fix: after 3.2.5
Fix from $1,600 2024-02-01
Duplicator CRITICAL 9.8
CVE-2018-25095

The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration fil…

Fix: 1.3.0+
Fix from $2,300 2024-01-08
Duplicator HIGH 7.5
CVE-2023-6114EPSS 31%

The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-lite/tmp` …

Fix: 1.5.7.1 / 4.5.14.2+
Fix from $1,950 2023-12-26
Wp Mail Logging MEDIUM 6.1
CVE-2023-3081

The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.11.1 due…

Fix: 1.11.2+
Fix from $1,600 2023-07-12
Duplicator MEDIUM 6.1
CVE-2023-33309

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Awesome Motive Duplicator Pro plugin <= 4.5.11 versions.

Fix: 4.5.11.1+
Fix from $1,600 2023-05-28
Easy Digital Downloads CRITICAL 9.8
CVE-2023-30869

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads…

Fix: 3.1.1.4.2+
Fix from $2,300 2023-05-02
Easy Digital Downloads CRITICAL 9.8
CVE-2022-3600

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.

Fix: 3.1.0.2+
Fix from $2,300 2022-11-21
Duplicator HIGH 7.5
CVE-2022-2551EPSS 17%

The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of t…

Fix: 1.4.7+
Fix from $1,950 2022-08-22
Easy Digital Downloads HIGH 7.2
CVE-2022-33900

PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.

Fix: after 3.0.1
Fix from $1,950 2022-08-22
Duplicator MEDIUM 5.3
CVE-2022-2552EPSS 11%

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as serve…

Fix: 1.4.7.1+
Fix from $1,600 2022-08-22
Duplicator HIGH 7.5
CVE-2020-11738 KEVEPSS 98%

The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file param…

Fix: 1.3.28 / 3.8.7.1+
Fix from $1,950 2020-04-13
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9521

The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x befo…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9522

The Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9523

The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9524

The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9506

The Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9507

The Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x b…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9508

The Easy Digital Downloads (EDD) Commissions extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9509

The Easy Digital Downloads (EDD) Content Restriction extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before …

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9510

The Easy Digital Downloads (EDD) Cross-sell Upsell extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9511

The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9512

The Easy Digital Downloads (EDD) CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23
Easy Digital Downloads MEDIUM 6.1
CVE-2015-9513

The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1…

Fix: 1.8.7 / 1.9.10+
Fix from $1,600 2019-10-23