Easy Digital Downloads – eCommerce Payments and Subscriptions made easy vulnerabilities
4 known vulnerabilities in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy from Smub. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Easy Digital Downloads – eCommerce Payments…: Improper Authentication
The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator account takeover in all versions up to, and including, 3.7.2. During a PayPal guest checkout, the email address entered in the guest-checkout field
- 7.2 High severity
Easy Digital Downloads – eCommerce Payments…: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PayPal IPN Parameters in all versions up to, and including, 3.6.9 due to insufficient input sanitization and outpu
- 7.2 High severity
Easy Digital Downloads – eCommerce Payments…: Unrestricted Upload of File with Dangerous Type
The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edd_do_ajax_import_file_upload() function , which only checks the client-suppl
- 7.2 High severity
Easy Digital Downloads – eCommerce Payments…: Deserialization of Untrusted Data
The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'upload[file]' parameter in versions up to, and including 3.3.3. This makes it possible for authenticated a