5024 matches found
CVE-2015-9348
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...
Design/Logic Flaw
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...
CVE-2015-9348
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...
CVE-2015-9348
CVE-2015-9348 affects the WordPress Sell Downloads plugin prior to version 1.0.8. The vulnerability arises from insufficient restrictions on brute-force guessing of purchase IDs, enabling an attacker to obtain purchase IDs. Multiple connected sources (Red Hat, CNVD, WPVulndb, NVD) corroborate thi...
PT-2019-7307
Name of the Vulnerable Software and Affected Versions sell-downloads plugin versions prior to 1.0.8 Description The issue is related to insufficient restrictions on brute-force guessing of purchase IDs. Recommendations For versions prior to 1.0.8, update to version 1.0.8 or later to resolve the...
CVE-2015-9348: Improper Input Validation
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...
WordPress easy-digital-downloads plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-digital-downloads is an e-commerce plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress easy-digital-downloads plugin SQL injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-digital-downloads is an e-commerce plugin used in it. A SQL injection vulnerability exists in the WordPress easy-digital-download...
CVE-2019-15116
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...
CVE-2019-15116
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...
CVE-2015-9324
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...
Design/Logic Flaw
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...
Sql injection
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...
CVE-2019-15116
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...
CVE-2019-15116
CVE-2019-15116 affects the WordPress Easy Digital Downloads plugin prior to version 2.9.16. The vulnerability is a cross-site scripting (XSS) flaw associated with how IP addresses are logged, and multiple sources describe it as stored XSS. Impact is client-side script execution when vulnerable da...
CVE-2015-9324
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...
CVE-2015-9324
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...
CVE-2015-9324
The CVE-2015-9324 entry concerns the WordPress Easy Digital Downloads plugin prior to version 2.3.3, which is affected by a SQL injection vulnerability. The connected documents corroborate SQL injection as the issue (WordPress plugin data; Red Hat/CNVD entries; WPVulndb). The root cause is improp...
CVE-2015-9324: Improper Neutralization of Special Elements used in an SQL Command
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...
CVE-2019-15116: Improper Neutralization of Input During Web Page Generation
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...