Awesomemotive vulnerabilities, page 2

69 vulnerabilities

Known vulnerabilities in Awesomemotive products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.

6.1MediumCVE-2015-9536awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9518awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9523awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9509awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Content Restriction extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9520awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9514awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Free Downloads extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9532awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9522awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9508awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Commissions extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9531awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9516awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9525awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9527awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Simple Shipping extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9506awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9512awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9519awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) PDF Stamper extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%6.1MediumCVE-2015-9521awesomemotive · easy_digital_downloads +2 moreawesomemotive easy_digital_downloadsThe Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.EPSS0.92%5.3MediumCVE-2025-2252awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title DisclosureThe Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.6.1 via the edd_ajax_get_download_title() function. This makes it possible for unauthenticated attackers to extract private post titles of downloads. The impact here is minimal.EPSS0.39%6.4MediumCVE-2025-4670awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt ShortcodeThe Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's edd_receipt shortcode in all versions up to, and including, 3.3.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.EPSS0.34%7.5HighCVE-2020-11738awesomemotive · duplicator +2 moreawesomemotive duplicatorThe Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.KEVEPSS97.82%