649 matches found
CVE-2026-105194
The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user, allowing users with subscriber-level access to view other customers' recent order products and obtain signed download links that grant access to paid digital files without purchase...
CVE-2026-105194
The Easy Digital Downloads WordPress plugin, prior to version 3.7.1 , contains a vulnerability where block order data is not restricted to the current user. This allows users with subscriber-level access to view other customers' recent order products and obtain signed download links . Consequentl...
CVE-2026-105194 Easy Digital Downloads < 3.7.1 - Subscriber+ Sensitive Information Disclosure via User Downloads Block
The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user, allowing users with subscriber-level access to view other customers' recent order products and obtain signed download links that grant access to paid digital files without purchase...
EUVD-2026-94766
The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user, allowing users with subscriber-level access to view other customers' recent order products and obtain signed download links that grant access to paid digital files without purchase...
WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection
WordPress Easy Digital Downloads plugin 3.1.0.2 and 3.1.0.3 contains a SQL injection vulnerability in the s parameter of its edddownloadsearch action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...
Easy Digital Downloads - Privilege Escalation
Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1. id: CVE-2023-30869 info: name: Easy Digital Downloads - Privilege Escalation author: daffainfo severity: critical...
WordPress Easy Digital Downloads <= 3.2.12 - SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12. id: CVE-2024-5057 info: name: WordPress Easy Digital Downloads = 3.2.12 - SQL Injecti...
CVE-2026-42638
Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1...
CVE-2026-42638 WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1...
EUVD-2026-93060
Unauthenticated Broken Access Control in Easy Digital Downloads = 3.7.1 versions...
CVE-2026-42638 WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1...
CVE-2026-42638
The Easy Digital Downloads WordPress plugin versions
CVE-2025-14783-POC
🧨 CVE-2025-14783: Easy Digital Downloads 账户接管 PoC “信任是最可利用的安全缺陷。” 💀 描述 本仓库包含针对 CVE-2025-14783 的可运行概念验证（PoC），该漏洞是 WordPress 插件 Easy Digital Downloads EDD （版本 'passwordresetrequested', 'key' = $key, 'login' = rawurlencode $userlogin , , escurlraw $POST'eddredirect' // --- 注入点 , $message ; 通过控制...
CVE-2026-95522
Shop manager SQL Injection in Easy Digital Downloads = 3.7.0 versions...
CVE-2026-95522
The Easy Digital Downloads WordPress plugin (versions
CVE-2026-95522 WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability
Shop manager SQL Injection in Easy Digital Downloads = 3.7.0 versions...
EUVD-2026-85491
Shop manager SQL Injection in Easy Digital Downloads = 3.7.0 versions...
CVE-2026-95522 WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability
Shop manager SQL Injection in Easy Digital Downloads = 3.7.0 versions...
WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Easy Digital Downloads versions = 3.7.0...
