Easy Digital Downloads vulnerabilities

4 known vulnerabilities in Easy Digital Downloads from Easy Digital Downloads. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Easy Digital Downloads: Missing Authorization

  CVE-2024-43162Nov 1, 2024Easy Digital Downloads

  Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.2.12.

• 9.8 Critical severity

  Easy Digital Downloads: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-5057Aug 29, 2024Easy Digital DownloadsEPSS 2.59%

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12.

• 7.5 High severity

  Easy Digital Downloads: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-32100May 14, 2024Easy Digital Downloads

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.

• 9.8 Critical severity

  Easy Digital Downloads: Improper Authentication

  CVE-2023-30869May 2, 2023Easy Digital DownloadsEPSS 3.1%

  Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1.