PT-2019-7492 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

PT-2019-7481

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

PT-2019-7486 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

PT-2019-7479

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads EDD Per Product Emails extension for WordPress versions 1.8.x through 1.8.6 Easy Digital Downloads EDD Per Product Emails extension for WordPress versions 1.9.x through 1.9.9 Easy Digital Downloads EDD Per Product Emails...

PT-2019-7468 · Sandhills Development · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

PT-2019-7318

Name of the Vulnerable Software and Affected Versions Jetpack plugin for WordPress versions prior to 3.4.3 Description The issue concerns a problem with the Jetpack plugin for WordPress, where there is a potential for XSS Cross-Site Scripting attacks. This is due to the improper use of the add...

PT-2019-7322

Name of the Vulnerable Software and Affected Versions iThemes Exchange versions prior to 1.12.0 Description The issue is related to cross-site scripting XSS and involves the functions add query arg and remove query arg. Recommendations For versions prior to 1.12.0, update to version 1.12.0 or lat...

PT-2019-7330

Name of the Vulnerable Software and Affected Versions Manual Purchases Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with the Manual Purchases Add-on for iThemes Exchange before version 1.1.0 for WordPress, where there is a potential for XSS via th...

PT-2019-7319

Name of the Vulnerable Software and Affected Versions UpdraftPlus plugin versions prior to 1.9.64 Description The issue concerns a problem with the UpdraftPlus plugin for WordPress, where there is a potential for XSS Cross-Site Scripting attacks. This is due to the misuse of the add query arg and...

PT-2019-7329

Name of the Vulnerable Software and Affected Versions Invoices Add-on for iThemes Exchange versions prior to 1.4.0 Description The issue concerns a problem with the Invoices Add-on for iThemes Exchange, where there is a potential for XSS attacks. This is due to the use of add query arg and remove...

PT-2019-7320

Name of the Vulnerable Software and Affected Versions Related Posts plugin versions prior to 1.8.2 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.8.2, update to version 1.8.2 or later t...

PT-2019-7334

Name of the Vulnerable Software and Affected Versions Table Rate Shipping Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem where an attacker can exploit the add query arg and remove query arg functions to perform a cross-site scripting XSS attack...

PT-2019-7321

Name of the Vulnerable Software and Affected Versions Post Connector plugin versions prior to 1.0.4 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For Post Connector plugin versions prior to 1.0.4, update to...

PT-2019-7328

Name of the Vulnerable Software and Affected Versions Easy US Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy US Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting attacks. This is...

PT-2019-7327

Name of the Vulnerable Software and Affected Versions iThemes Exchange Easy EU Value Added VAT Taxes Add-on for WordPress version prior to 1.2.0 Description The issue concerns a problem with the Easy EU Value Added VAT Taxes Add-on for iThemes Exchange before version 1.2.0 for WordPress. It...

PT-2019-7338

Name of the Vulnerable Software and Affected Versions iThemes Builder Style Manager versions prior to 0.7.7 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 0.7.7, update to version 0.7.7 o...

PT-2019-7336

Name of the Vulnerable Software and Affected Versions iThemes Builder Theme Depot versions prior to 5.0.30 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 5.0.30, update to version 5.0.30 ...

PT-2019-7332

Name of the Vulnerable Software and Affected Versions iThemes Exchange PayPal Pro Add-on for WordPress version prior to 1.1.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, update ...

PT-2019-7324

Name of the Vulnerable Software and Affected Versions iThemes Exchange Authorize.net Add-on for WordPress version prior to 1.1.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, upda...

PT-2019-7325

Name of the Vulnerable Software and Affected Versions Custom URL Tracking Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with Custom URL Tracking Add-on for iThemes Exchange, where there is a potential for XSS attacks. This is due to the use of add...