Easy Digital Downloads – eCommerce Payments and Subscriptions made easy

Уязвимости

• CVE-2023-40005без авторизации≤ 3.1.5

  WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control

  Критич. 9.8

• CVE-2024-5057без авторизации≤ 3.2.12

  WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability

  Критич. 9.8

• CVE-2023-30869без авторизации≤ 3.1.1.4.1

  WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation

  Критич. 9.8

• CVE-2015-9324без авторизации

  The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.

  Критич. 9.8

• CVE-2024-31113без авторизации · нужен клик≤ 3.2.11

  WordPress Easy Digital Downloads plugin <= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerability

  Высокий 8.8

• CVE-2024-31293без авторизации · нужен клик≤ 3.2.6

  WordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerability

  Высокий 8.8

• CVE-2024-43162нужен вход≤ 3.2.12

  WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2026-95522менеджер магазина+≤ 3.7.0

  WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2026-39503без авторизации≤ 3.6.5

  WordPress Easy Digital Downloads plugin <= 3.6.5 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2024-32100без авторизации≤ 3.2.11

  WordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerability

  Высокий 7.5

• CVE-2026-12476менеджер магазина+≤ 3.6.9

  Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter

  Высокий 7.2

• CVE-2022-2439админ≤ 3.3.3

  Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserialization

  Высокий 7.2

• CVE-2022-33900высокие права≤ 3.0.1

  WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability

  Высокий 7.2

• CVE-2026-59524без авторизации≤ 3.6.7

  WordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability

  Средний 6.5

• CVE-2019-15116без авторизации · нужен клик

  The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.

  Средний 6.1

• CVE-2025-8102без авторизации · нужен клик≤ 3.5.0

  Easy Digital Downloads <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions

  Средний 5.4

• CVE-2023-51684нужен вход≤ 3.2.5

  WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2025-4670участник+≤ 3.3.8.1

  Easy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode

  Средний 5.4

• CVE-2025-11271без авторизации≤ 3.5.2

  Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation

  Средний 5.3

• CVE-2025-2252без авторизации≤ 3.3.6.1

  Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure

  Средний 5.3

• CVE-2024-2302без авторизации≤ 3.2.9

  Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure

  Средний 5.3

• CVE-2026-66476админ≤ 3.6.9

  WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability

  Средний 4.9

• CVE-2024-12875админ≤ 3.3.2

  Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download

  Средний 4.9

• CVE-2021-39354высокие права≤ 2.11.2

  Easy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site Scripting

  Средний 4.8

• CVE-2026-7533без авторизации · нужен клик≤ 3.6.7

  Easy Digital Downloads <= 3.6.7 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameter

  Средний 4.3

• CVE-2025-14783без авторизации · нужен клик≤ 3.6.2

  Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect

  Средний 4.3

• CVE-2024-13517админ≤ 3.3.2

  Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting

  Средний 4.0

• CVE-2024-6691админ≤ 3.3.2

  Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting

  Средний 4.0

• CVE-2024-9654без авторизации≤ 3.3.4

  Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass

  Низкий 3.7

• CVE-2024-6692админ≤ 3.3.2

  Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting

  Низкий 3.1