easy_digital_downloads vulnerabilities

3 known vulnerabilities in easy_digital_downloads from Easydigitaldownloads. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Easy Digital Downloads – eCommerce Payments…: Deserialization of Untrusted Data

  CVE-2022-2439Sep 24, 2024Smub

  The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'upload[file]' parameter in versions up to, and including 3.3.3. This makes it possible for authenticated a

• 9.8 Critical severity

  Easy Digital Downloads: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-5057Aug 29, 2024Easy Digital DownloadsEPSS 2.59%

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12.

• 9.8 Critical severity

  Easy Digital Downloads – Recent Purchases: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2024-35629Jun 4, 2024Wow-Company

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Wow-Company Easy Digital Downloads – Recent Purchases allows PHP Remote File Inclusion.This issue affects Easy Digital Downloads – Recent P