Medium
CVE-2024-32100
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 51
Reset filters
Medium
CVE-2024-31113
Easy Digital Downloads <= 3.2.11 - Cross-Site Request Forgery
Medium
CVE-2024-31293
Easy Digital Downloads <= 3.2.6 - Cross-Site Request Forgery
Medium
CVE-2024-2302
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure
Medium
CVE-2024-0659
Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options
Medium
CVE-2023-51684
Easy Digital Downloads <= 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-40005
Easy Digital Downloads <= 3.1.5 - Missing Authorization
Medium
e3adcb85-efc5-429c-8a06-9bfb472d668f
Easy Digital Downloads <= 3.1.1.4.2 - Cross-Site Request Forgery via edd_trigger_upgrades
Critical
CVE-2023-30869
Easy Digital Downloads 3.1 - 3.1.1.4.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
Medium
CVE-2023-0380
Easy Digital Downloads <= 3.1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-23489
Easy Digital Downloads < 3.1.0.4 - SQL Injection
High
CVE-2022-2387
Easy Digital Downloads <= 2.11.7 - Cross-Site Request Forgery to Arbitrary Post Deletion
High
CVE-2022-3600
Easy Digital Downloads <= 3.1.0.1.1 - Unauthenticated CSV Injection
Critical
CVE-2022-33900
Easy Digital Downloads <= 3.0.1 - PHP Object Injection
High
CVE-2022-0707
Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery
Medium
CVE-2022-0706
Easy Digital Downloads <= 2.11.5 - Admin+ Cross-Site Scripting
Medium
CVE-2021-39354
Easy Digital Downloads <= 2.11.2 - Reflected Cross-Site Scripting
Medium
670e92d6-4136-48f1-88d1-69a9fa772a65
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.11.2 - Reflected Cross-Site Scripting
Medium
a0aa2a10-da05-41e4-bbfa-938341919b5d
Easy Digital Downloads <= 2.10.3 - Reflected Cross-Site Scripting
Medium
0a6b87a8-2ebf-4db6-bf09-e9642708b2aa
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.10.2 - Cross-Site Request Forgery
Medium
b5226241-dbf4-42e5-b9f4-77da125fa810
Easy Digital Downloads <= 2.10.2 - Cross-Site Request Forgery
Critical
CVE-2015-9324
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.3.2 - SQL Injection
Medium
CVE-2019-15116
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.9.15 - Stored Cross-Site Scripting
Critical
b4cd5c42-bba2-4900-b450-a575c0007402
Easy Digital Downloads <= 2.5.7 - PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.