Browse CVEs

MEDIUM 5.4 CVE-2025-4670 The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Easy Digital Downloads 3.3.9+ Fix from $1,6002025-05-29 MEDIUM 5.3 CVE-2025-2252 The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in a… Easy Digital Downloads 3.3.7+ Fix from $1,6002025-03-25 CRITICAL 9.8 CVE-2023-40005 Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Cont… Easy Digital Downloads 3.2.0+ Fix from $2,3002024-12-13 HIGH 8.8 CVE-2024-43162 Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… Easy Digital Downloads 3.3.0+ Fix from $1,9502024-11-01 HIGH 7.2 CVE-2022-2439 The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via … Easy Digital Downloads 3.3.4+ Fix from $1,9502024-09-24 CRITICAL 9.8 CVE-2024-5057 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.Thi… Easy Digital Downloads after 3.2.12 Fix from $2,3002024-08-29 MEDIUM 5.3 CVE-2024-2302 The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Sensitiv… Easy Digital Downloads 3.2.10+ Fix from $1,6002024-04-09 MEDIUM 5.4 CVE-2023-51684 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads –… Easy Digital Downloads after 3.2.5 Fix from $1,6002024-02-01 CRITICAL 9.8 CVE-2018-25095 The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration fil… Duplicator 1.3.0+ Fix from $2,3002024-01-08 HIGH 7.5 CVE-2023-6114EPSS 31% The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-lite/tmp` … Duplicator 1.5.7.1 / 4.5.14.2+ Fix from $1,9502023-12-26 MEDIUM 6.1 CVE-2023-3081 The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.11.1 due… Wp Mail Logging 1.11.2+ Fix from $1,6002023-07-12 MEDIUM 6.1 CVE-2023-33309 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Awesome Motive Duplicator Pro plugin <= 4.5.11 versions. Duplicator 4.5.11.1+ Fix from $1,6002023-05-28 CRITICAL 9.8 CVE-2023-30869 Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads… Easy Digital Downloads 3.1.1.4.2+ Fix from $2,3002023-05-02 CRITICAL 9.8 CVE-2022-3600 The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection. Easy Digital Downloads 3.1.0.2+ Fix from $2,3002022-11-21 HIGH 7.5 CVE-2022-2551EPSS 17% The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of t… Duplicator 1.4.7+ Fix from $1,9502022-08-22 HIGH 7.2 CVE-2022-33900 PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress. Easy Digital Downloads after 3.0.1 Fix from $1,9502022-08-22 MEDIUM 5.3 CVE-2022-2552EPSS 11% The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as serve… Duplicator 1.4.7.1+ Fix from $1,6002022-08-22 HIGH 7.5 CVE-2020-11738 KEVEPSS 98% The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file param… Duplicator 1.3.28 / 3.8.7.1+ Fix from $1,9502020-04-13 MEDIUM 6.1 CVE-2015-9521 The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x befo… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9522 The Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9523 The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9524 The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9506 The Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9507 The Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x b… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9508 The Easy Digital Downloads (EDD) Commissions extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9509 The Easy Digital Downloads (EDD) Content Restriction extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before … Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9510 The Easy Digital Downloads (EDD) Cross-sell Upsell extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9511 The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9512 The Easy Digital Downloads (EDD) CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2015-9513 The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1… Easy Digital Downloads 1.8.7 / 1.9.10+ Fix from $1,6002019-10-23