CVE-2015-9513

The CVE-2015-9513 entry concerns the Easy Digital Downloads (EDD) Favorites extension for WordPress. Affected versions include EDD Favorites before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7. The vulnerability is an XSS flaw cau...

CVE-2015-9514

CVE-2015-9514 affects the WordPress Easy Digital Downloads Free Downloads extension. The vulnerability is a cross-site scripting (XSS) issue caused by misuse of add_query_arg in multiple version branches: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x befo...

CVE-2015-9515

CVE-2015-9515 affects the WordPress Easy Digital Downloads htaccess Editor extension. An XSS vulnerability arises from misusing add_query_arg in the extension across multiple branches: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x ...

CVE-2015-9502

The CVE-2015-9502 entry concerns the WordPress Auberge theme prior to version 1.4.5, where a DOM-based/XSS flaw exists in the genericons/example.html anchor identifier. The vulnerability stems from unsanitized input that allows crafted anchors to inject client-side script, enabling potential mani...

CVE-2015-9516

The CVE-2015-9516 entry concerns the Easy Digital Downloads (EDD) Invoices extension for WordPress. Affected versions are EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, where an XSS vulnerability arises from misusi...

CVE-2015-9518

CVE-2015-9518 concerns the Easy Digital Downloads (EDD) PDF Invoices extension for WordPress. The vulnerability is an XSS due to misused add_query_arg, affecting EDD versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2....

CVE-2015-9519

The CVE-2015-9519 issue affects the Easy Digital Downloads PDF Stamper extension for WordPress. It uses add_query_arg in ways that enable cross-site scripting (XSS) in multiple release lines: EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9,...

CVE-2015-9520

CVE-2015-9520 affects the Easy Digital Downloads (EDD) Per Product Emails extension for WordPress. The vulnerability is an XSS due to misused add_query_arg in multiple version lines: EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3....

CVE-2015-9521

The CVE-2015-9521 issue affects the Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress. The vulnerability is an XSS flaw caused by misusing add_query_arg, affecting EDD versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x befor...

CVE-2015-9522

The CVE-2015-9522 entry concerns the Easy Digital Downloads (EDD) QR Code extension for WordPress. Affected versions include 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, where an XSS vulnerability exists due to misus...

CVE-2015-9523

CVE-2015-9523 affects the Easy Digital Downloads (EDD) Recommended Products extension for WordPress. The vulnerability is an XSS due to misuse of add_query_arg in EDD versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2...

CVE-2015-9524

CVE-2015-9524 affects the Easy Digital Downloads (EDD) Recount Earnings extension for WordPress. The root cause is a misused add_query_arg function that enables cross-site scripting (XSS). Affected versions are EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, ...

CVE-2015-9525

The CVE-2015-9525 issue concerns the Easy Digital Downloads (EDD) Recurring Payments extension for WordPress. The vulnerability is an XSS flaw caused by misusing add_query_arg in multiple EDD versions (1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before ...

CVE-2015-9526

The CVE refers to WordPress Easy Digital Downloads (EDD) Reviews extension. Vulnerable components are the EDD Reviews extension across multiple tracked versions (EDD 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; 2.2.x before 2.2.9; 2.3.x before 2.3.7) due to mi...

CVE-2015-9527

The CVE-2015-9527 entry concerns the WordPress Easy Digital Downloads (EDD) Simple Shipping extension. A cross-site scripting (XSS) flaw exists due to misuse of add_query_arg, affecting EDD releases across multiple branches: 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x befor...

CVE-2015-9528

CVE-2015-9528 affects the WordPress Easy Digital Downloads Software Licensing extension. The vulnerability is a cross-site scripting (XSS) caused by misusing add_query_arg in multiple versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, a...

CVE-2015-9529

CVE-2015-9529 covers an XSS flaw in the WordPress Easy Digital Downloads Stripe extension due to misuse of add_query_arg. Affected EDD versions include 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7. Red Hat and CNVD en...

CVE-2015-9530

The CVE targets the WordPress Easy Digital Downloads (EDD) Upload File extension. Root cause: misused add_query_arg leading to cross‑site scripting (XSS). Affected versions (per sources): EDD 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; 2.2.x before 2.2.9; 2.3...

CVE-2015-9531

CVE-2015-9531 concerns the WordPress plugin family Easy Digital Downloads (EDD) Wish Lists extension. The XSS vulnerability arises from misuse of the add_query_arg function in affected releases: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, ...

CVE-2015-9533

The CVE-2015-9533 entry concerns the WordPress Easy Digital Downloads Lattice theme, where XSS is caused by misusing add_query_arg. Affected versions are EDD Lattice 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7. Patch...