Easy Digital Downloads@* Security Vulnerabilities and Issues — Easy Digital Downloads@* CVE List

Lucene search

AwesomemotiveEasy Digital Downloads*

2 matches found

CVE•added 2023/05/02 10:15 a.m.•80 views

CVE-2023-30869

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1.

9.8CVSS9.6AI score0.00114EPSS

CVE•added 2023/02/21 9:15 a.m.•51 views

CVE-2023-0380

The Easy Digital Downloads WordPress plugin before 3.1.0.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

5.4CVSS5.5AI score0.00113EPSS