Awesomemotive vulnerabilities

69 vulnerabilities

Known vulnerabilities in Awesomemotive products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.

Products

6
9.8CriticalCVE-2018-17207awesomemotive · duplicator +1 moreawesomemotive duplicatorAn issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution.EPSS60.09%9.8CriticalCVE-2018-25095awesomemotive · duplicator +2 moreDuplicator < 1.3.0 - Unauthenticated RCEThe Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration files. If this installer script is left on the site after use, it could be use to run arbitrary code on the server.EPSS0.92%6.1MediumCVE-2018-7543awesomemotive · duplicator +1 moreawesomemotive duplicatorCross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the json parameter.EPSS3.35%4.8MediumCVE-2021-39354awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site ScriptingThe Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $start_date and $end_date parameters found in the ~/includes/admin/payments/class-payments-table.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.11.2.EPSS0.93%9.8CriticalCVE-2015-9530awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Upload File extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9528awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9526awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9533awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9505awesomemotive · easy_digital_downloads +1 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9534awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9529awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%9.8CriticalCVE-2015-9324awesomemotive · easy_digital_downloads +1 moreawesomemotive easy_digital_downloadsThe easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.EPSS1.95%6.1MediumCVE-2015-9507awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9511awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9513awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9524awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9510awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Cross-sell Upsell extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9517awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9515awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) htaccess Editor extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9535awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%