CVE-2015-9524

CVE-2015-9524 affects the Easy Digital Downloads (EDD) Recount Earnings extension for WordPress. The root cause is a misused add_query_arg function that enables cross-site scripting (XSS). Affected versions are EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, ...

CVE-2015-9525

The Easy Digital Downloads EDD Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9525

The CVE-2015-9525 issue concerns the Easy Digital Downloads (EDD) Recurring Payments extension for WordPress. The vulnerability is an XSS flaw caused by misusing add_query_arg in multiple EDD versions (1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before ...

CVE-2015-9526

The CVE refers to WordPress Easy Digital Downloads (EDD) Reviews extension. Vulnerable components are the EDD Reviews extension across multiple tracked versions (EDD 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; 2.2.x before 2.2.9; 2.3.x before 2.3.7) due to mi...

CVE-2015-9527

The Easy Digital Downloads EDD Simple Shipping extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9528

CVE-2015-9528 affects the WordPress Easy Digital Downloads Software Licensing extension. The vulnerability is a cross-site scripting (XSS) caused by misusing add_query_arg in multiple versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, a...

CVE-2015-9528

The Easy Digital Downloads EDD Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9529

CVE-2015-9529 covers an XSS flaw in the WordPress Easy Digital Downloads Stripe extension due to misuse of add_query_arg. Affected EDD versions include 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7. Red Hat and CNVD en...

CVE-2015-9529

The Easy Digital Downloads EDD Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9530

The CVE targets the WordPress Easy Digital Downloads (EDD) Upload File extension. Root cause: misused add_query_arg leading to cross‑site scripting (XSS). Affected versions (per sources): EDD 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; 2.2.x before 2.2.9; 2.3...

CVE-2015-9531

The Easy Digital Downloads EDD Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9531

CVE-2015-9531 concerns the WordPress plugin family Easy Digital Downloads (EDD) Wish Lists extension. The XSS vulnerability arises from misuse of the add_query_arg function in affected releases: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, ...

CVE-2015-9532

The CVE-2015-9532 entry concerns the Easy Digital Downloads (EDD) Digital Store theme for WordPress. Affected versions include EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, where cross‑site scripting (XSS) is caus...

CVE-2015-9533

The CVE-2015-9533 entry concerns the WordPress Easy Digital Downloads Lattice theme, where XSS is caused by misusing add_query_arg. Affected versions are EDD Lattice 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7. Patch...

CVE-2015-9534

The CVE-2015-9534 entry describes a cross-site scripting (XSS) vulnerability in the WordPress Easy Digital Downloads Quota theme. Affected are EDD Quota theme builds for WordPress with the following vulnerable branches: 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1...

CVE-2015-9535

CVE-2015-9535 concerns the WordPress Easy Digital Downloads (EDD) Shoppette theme. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability caused by misuse of the add_query_arg function. Affected EDD/Shoppette versions include: 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x ...

CVE-2015-9536

The CVE-2015-9536 entry concerns the WordPress Easy Digital Downloads (EDD) Twenty-Twelve theme. The vulnerability is an XSS issue caused by misuse of add_query_arg in multiple EDD versions bundled with the Twenty-Twelve theme: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x be...

EDraw Flowchart Active-X Control 2.3 Buffer Overflow

!/usr/bin/perl Title: EDraw Flowchart ActiveX Control 2.3 .edd parsing Remote Buffer Overflow PoC Vendor: EdrawSoft Product Web Page: http://www.edrawsoft.com Summary: Do you want to learn how to draw? Now you can online! Learn how to draw like a local application with Edraw Flowchart ActiveX...

EDraw Flowchart ActiveX Control 2.3 (.edd parsing) Remote Buffer Overflow PoC

Summary Do you want to learn how to draw? Now you can online! Learn how to draw like a local application with Edraw Flowchart ActiveX Control that lets you quickly build basic flowcharts, organizational charts, business charts, hr diagram, work flow, programming flowchart and network diagrams...

EDraw Flowchart ActiveX Control 2.3 (.edd parsing) Buffer Overflow PoC

Exploit for windows platform in category local exploits ============================================================================= EDraw Flowchart ActiveX Control 2.3 .edd parsing Remote Buffer Overflow PoC =============================================================================...