Awesomemotive Easy Digital Downloads vulnerabilities

57 vulnerabilities

Known vulnerabilities in Awesomemotive Easy Digital Downloads, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8MediumCVE-2021-39354awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site ScriptingThe Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $start_date and $end_date parameters found in the ~/includes/admin/payments/class-payments-table.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.11.2.EPSS0.93%9.8CriticalCVE-2015-9530awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Upload File extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9528awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9526awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9533awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9505awesomemotive · easy_digital_downloads +1 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9534awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9529awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%9.8CriticalCVE-2015-9324awesomemotive · easy_digital_downloads +1 moreawesomemotive easy_digital_downloadsThe easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.EPSS1.95%6.1MediumCVE-2015-9507awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9511awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9513awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9524awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9510awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Cross-sell Upsell extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9517awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9515awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) htaccess Editor extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9535awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9536awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9518awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9523awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%