WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-digital-downloads
Published
2024-05-09
Title
Easy Digital Downloads < 3.2.12 - Unauthenticated Sensitive Information Exposure
Slug
easy-digital-downloads
Published
2024-05-09
Title
Easy Digital Downloads < 3.2.12 - Cross-Site Request Forgery
Slug
easy-digital-downloads
Published
2024-08-01
Title
Easy Digital Downloads < 3.3.1 - Unauthenticated SQL Injection
Slug
easy-digital-downloads
Published
2024-08-09
Title
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) < 3.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settings
Slug
easy-digital-downloads
Published
2024-08-09
Title
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) < 3.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text
Slug
easy-digital-downloads
Published
2024-08-07
Title
Easy Digital Downloads < 3.3.1 - Missing Authorization
Slug
easy-digital-downloads
Published
2024-09-23
Title
Easy Digital Downloads – Simple eCommerce for Selling Digital Files < 3.3.4 - Authenticated (Admin+) PHAR Deserialization
Slug
easy-digital-downloads
Published
2024-12-16
Title
Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass
Slug
easy-digital-downloads
Published
2024-12-20
Title
Easy Digital Downloads < 3.3.3 - Authenticated (Admin+) Arbitrary File Download
Slug
easy-digital-downloads
Published
2025-01-17
Title
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) < 3.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Title
Slug
easy-digital-downloads
Published
2025-03-24
Title
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy < 3.3.7 - Unauthenticated Private Post Title Disclosure
Slug
easy-digital-downloads
Published
2025-05-28
Title
Easy Digital Downloads < 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode
Slug
easy-digital-downloads
Published
2025-08-19
Title
Easy Digital Downloads < 3.5.1 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions
Slug
easy-digital-downloads
Published
2025-11-05
Title
Easy Digital Download < 3.5.3 - Insufficient Verification to Order Manipulation
Slug
easy-digital-downloads
Published
2025-12-30
Title
Easy Digital Downloads < 3.6.3 - Unvalidated Redirect
Slug
easy-digital-downloads
Published
2026-04-20
Title
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy < 3.6.6 - Missing Authorization
Slug
easy-digital-downloads
Published
2026-05-27
Title
Easy Digital Downloads < 3.6.8 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameter
Slug
easy-digital-downloads
Published
2026-07-22
Title
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy < 3.6.8 - Missing Authorization
Slug
easy-digital-downloads
Published
2026-07-28
Title
Easy Digital Downloads < 3.6.9.1 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter
Slug
easy-digital-downloads
Published
2026-07-27
Title
Easy Digital Downloads < 3.6.9.1 - Authenticated (Admin) Arbitrary File Deletion
Slug
easy-digital-downloads
Published
2026-10-05
Title
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy < 3.7.1.1 - Missing Authorization
Slug
easy-digital-downloads
Published
2026-10-09
Title
Easy Digital Downloads < 3.6.9.1 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parameters
Slug
easy-digital-downloads
Published
2026-09-23
Title
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy < 3.7.1 - Authenticated (Shop Manager+) SQL Injection
Slug
easy-digital-downloads
Published
2026-10-06
Title
Easy Digital Downloads < 3.7.1 - Subscriber+ Sensitive Information Disclosure via User Downloads Block
Slug
easy-digital-downloads
Published
2026-10-06
Title
Easy Digital Downloads < 3.7.1 - Unauthenticated Account Creation with Registration Disabled