Awesomemotive vulnerabilities, page 3

69 vulnerabilities

Known vulnerabilities in Awesomemotive products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.

7.5HighCVE-2022-2552awesomemotive · duplicator +2 moreDuplicator < 1.4.7.1 - Unauthenticated System Information DisclosureThe Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.EPSS12.03%7.2HighCVE-2022-2439awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR DeserializationThe Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'upload[file]' parameter in versions up to, and including 3.3.3. This makes it possible for authenticated administrative users to call files using a PHAR wrapper, that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present.EPSS0.69%8.8HighCVE-2022-2387awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRFThe Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete arbitrary post via a CSRF attackEPSS0.31%9.8CriticalCVE-2022-2551awesomemotive · duplicator +2 moreDuplicator < 1.4.7 - Unauthenticated Backup DownloadThe Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer script has been run once by an administrator, allowing download of the full site backup without authenticating.EPSS17.72%8.8HighCVE-2022-0707awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads < 2.11.6 - Arbitrary Payment Note Insertion via CSRFThe Easy Digital Downloads WordPress plugin before 2.11.6 does not have CSRF check in place when inserting payment notes, which could allow attackers to make a logged admin insert arbitrary notes via a CSRF attackEPSS0.48%5.5MediumCVE-2022-0706awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site ScriptingThe Easy Digital Downloads WordPress plugin before 2.11.6 does not sanitise and escape the Downloadable File Name in the Logs, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltered_html capability is disallowedEPSS0.66%9.8CriticalCVE-2022-3600awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads < 3.1.0.2 - Unauthenticated CSV InjectionThe Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.EPSS1.31%9.8CriticalCVE-2022-33900awesomemotive · easy_digital_downloads +2 moreWordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerabilityPHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.EPSS0.92%5.3MediumCVE-2024-2302awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information ExposureThe Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.9. This makes it possible for unauthenticated attackers to download the debug log via Directory Listing. This file may include PII.EPSS0.60%4.4MediumCVE-2024-13517awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via TitleThe Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title value in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.EPSS0.24%5.5MediumCVE-2024-0659awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing optionsThe Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the variable pricing option title in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with shop manger-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.EPSS0.40%3.7LowCVE-2024-9654awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall BypassThe Easy Digital Downloads plugin for WordPress is vulnerable to Improper Authorization in versions 3.1 through 3.3.4. This is due to a lack of sufficient validation checks within the 'verify_guest_email' function to ensure the requesting user is the intended recipient of the purchase receipt. This makes it possible for unauthenticated attackers to bypass intended security restrictions and view the receipts of other users, which contains a link to download paid content. Successful exploitation requires knowledge of another customers email address as well as the file ID of the content they purchased.EPSS0.36%8.8HighCVE-2024-43162awesomemotive · easy_digital_downloads +2 moreWordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.2.12.EPSS0.49%10CriticalCVE-2024-5057awesomemotive · easy_digital_downloads +2 moreWordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12.EPSS2.59%4.4MediumCVE-2024-6691awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency SettingsThe Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the currency value in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.EPSS0.35%3.3LowCVE-2024-6692awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement TextThe Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Agreement Text value in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.EPSS0.38%4.9MediumCVE-2024-12875awesomemotive · easy_digital_downloads +2 moreEasy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File DownloadThe Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.2 via the file download functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.EPSS0.99%6.1MediumCVE-2019-15116awesomemotive · easy_digital_downloads +1 moreawesomemotive easy_digital_downloadsThe easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.EPSS0.97%6.5MediumCVE-2026-54190awesomemotive · envira photo gallery +1 moreWordPress Envira Photo Gallery plugin <= 1.12.5 - Broken Access Control vulnerabilityUnauthenticated Broken Access Control in Envira Photo Gallery <= 1.12.5 versions.EPSS0.33%7.5HighCVE-2026-42638awesomemotive · easy_digital_downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1.EPSS0.26%