Easydigitaldownloads vulnerabilities
We track 3 vulnerabilities in Easydigitaldownloads products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2024.
Latest Easydigitaldownloads vulnerabilities
- 7.2 High severity
Easy Digital Downloads – eCommerce Payments…: Deserialization of Untrusted Data
The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'upload[file]' parameter in versions up to, and including 3.3.3. This makes it possible for authenticated a
- 9.8 Critical severity
Easy Digital Downloads: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12.
- 9.8 Critical severity
Easy Digital Downloads – Recent Purchases: Inclusion of Functionality from Untrusted Control Sphere
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Wow-Company Easy Digital Downloads – Recent Purchases allows PHP Remote File Inclusion.This issue affects Easy Digital Downloads – Recent P