WordPress Plugin Vulnerabilities

Easy Digital Downloads < 2.3.3 - SQL Injection

Description

The Easy Digital Downloads – Simple Ecommerce for Selling Digital Files WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
easy-digital-downloads
Fixed in 2.3.3

References

CVE
CVE-2015-9324

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
639cceec-9d21-42a7-972c-2145d9a38aac

Timeline

Publicly Published
2015-03-18 (about 11 years ago)
Added
2019-08-25 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-08-01
Title
AdRotate <= 3.9.4 - clicktracker.php track Parameter SQL Injection
Published
2014-08-01
Title
ActiveHelper LiveHelp Server 3.2.2 - server/import/tracker.php Multiple Parameter SQL Injection
Published
2021-03-08
Title
SuperStoreFinder & SuperInteractiveMaps - Unauthenticated SQL Injections
Published
2025-04-09
Title
Accessibility Suite by Online ADA < 4.19 - Authenticated (Subscriber+) SQL Injection
Published
2026-05-13
Title
Taskbuilder – Project Management & Task Management Tool With Kanban Board < 5.0.7 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' Parameter