CVE-2015-9511

CVE-2015-9511 affects the Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress. The vulnerability is an XSS in which add_query_arg is misused, impacting EDD versions: 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; 2.2.x before 2.2.9...

CVE-2015-9512

The CVE-2015-9512 entry concerns the Easy Digital Downloads CSV Manager extension for WordPress. It describes an XSS vulnerability caused by misusing add_query_arg, affecting EDD versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2....

CVE-2015-9512

The Easy Digital Downloads EDD CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9513

The CVE-2015-9513 entry concerns the Easy Digital Downloads (EDD) Favorites extension for WordPress. Affected versions include EDD Favorites before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7. The vulnerability is an XSS flaw cau...

CVE-2015-9514

The Easy Digital Downloads EDD Free Downloads extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9514

CVE-2015-9514 affects the WordPress Easy Digital Downloads Free Downloads extension. The vulnerability is a cross-site scripting (XSS) issue caused by misuse of add_query_arg in multiple version branches: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x befo...

CVE-2015-9515

CVE-2015-9515 affects the WordPress Easy Digital Downloads htaccess Editor extension. An XSS vulnerability arises from misusing add_query_arg in the extension across multiple branches: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x ...

CVE-2015-9515

The Easy Digital Downloads EDD htaccess Editor extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9516

The CVE-2015-9516 entry concerns the Easy Digital Downloads (EDD) Invoices extension for WordPress. Affected versions are EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, where an XSS vulnerability arises from misusi...

CVE-2015-9516

The Easy Digital Downloads EDD Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9517

The CVE-2015-9517 entry concerns Easy Digital Downloads (EDD) Manual Purchases extension for WordPress. A stored XSS vulnerability arises from misusing add_query_arg, affecting EDD Manual Purchases across versions: 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; ...

CVE-2015-9518

CVE-2015-9518 concerns the Easy Digital Downloads (EDD) PDF Invoices extension for WordPress. The vulnerability is an XSS due to misused add_query_arg, affecting EDD versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2....

CVE-2015-9519

The CVE-2015-9519 issue affects the Easy Digital Downloads PDF Stamper extension for WordPress. It uses add_query_arg in ways that enable cross-site scripting (XSS) in multiple release lines: EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9,...

CVE-2015-9519

The Easy Digital Downloads EDD PDF Stamper extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9520

The Easy Digital Downloads EDD Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9520

CVE-2015-9520 affects the Easy Digital Downloads (EDD) Per Product Emails extension for WordPress. The vulnerability is an XSS due to misused add_query_arg in multiple version lines: EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3....

CVE-2015-9521

The CVE-2015-9521 issue affects the Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress. The vulnerability is an XSS flaw caused by misusing add_query_arg, affecting EDD versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x befor...

CVE-2015-9522

The CVE-2015-9522 entry concerns the Easy Digital Downloads (EDD) QR Code extension for WordPress. Affected versions include 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, where an XSS vulnerability exists due to misus...

CVE-2015-9522

The Easy Digital Downloads EDD QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9523

CVE-2015-9523 affects the Easy Digital Downloads (EDD) Recommended Products extension for WordPress. The vulnerability is an XSS due to misuse of add_query_arg in EDD versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2...