Easy Digital Downloads Security Vulnerabilities and Issues — Easy Digital Downloads CVE List

Lucene search

AwesomemotiveEasy Digital Downloads

3 matches found

CVE•added 2024/08/29 2:15 p.m.•76 views

CVE-2024-5057

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12.

9.8CVSS9.8AI score0.02041EPSS

CVE•added 2024/08/12 1:38 p.m.•33 views

CVE-2024-6692

The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Agreement Text value in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escapin...

3.3CVSS3.6AI score0.00032EPSS

CVE•added 2024/08/12 1:38 p.m.•31 views

CVE-2024-6691

The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the currency value in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. Thi...

4.4CVSS4.4AI score0.00029EPSS