Sandhillsdev vulnerabilities
5 vulnerabilities
Known vulnerabilities in Sandhillsdev products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Easy Digital Downloads5 vulnerabilities
HighCVE-2024-31293easy digital downloads +2 moreWordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.6.EPSS0.23%HighCVE-2024-31113easy digital downloads +2 moreWordPress Easy Digital Downloads plugin <= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.EPSS0.22%HighCVE-2024-32100easy digital downloads +2 moreWordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerabilityExposure of Sensitive Information to an Unauthorized Actor vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.EPSS0.64%MediumCVE-2023-0380sandhillsdev · easy_digital_downloads +2 moreEasy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSSThe Easy Digital Downloads WordPress plugin before 3.1.0.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.EPSS0.46%CriticalCVE-2023-23489sandhillsdev · easy_digital_downloads +1 moresandhillsdev easy_digital_downloadsThe Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edd_download_search' action.EPSS11.17%