Advisories · Technology

Easy Digital Downloads.

Every CVE that names Easy Digital Downloads among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105190 CVE record

CVSS 5.3 Medium

Easy Digital Downloads < 3.7.1 - Unauthenticated Account Creation with Registration Disabled
- Easy Digital Downloads
- Broken access control
Not analysed yet 8 Oct 2026
CVE-2026-105194 CVE record

CVSS 4.3 Medium

Easy Digital Downloads < 3.7.1 - Subscriber+ Sensitive Information Disclosure via User Downloads Block
- Easy Digital Downloads
- Information disclosure
Not analysed yet 8 Oct 2026
CVE-2024-43162 CVE record

CVSS 4.3 Medium

WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability
- Easy Digital Downloads
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2024-5057 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability
- Easy Digital Downloads
- SQL injection
Not analysed yet 29 Aug 2024
CVE-2024-32100 CVE record

CVSS 5.3 Medium

WordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerability
- Easy Digital Downloads
- Information disclosure
Not analysed yet 13 May 2024
CVE-2024-31113 CVE record

CVSS 4.3 Medium

WordPress Easy Digital Downloads plugin <= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerability
- Easy Digital Downloads
- Cross-site request forgery (CSRF)
Not analysed yet 10 May 2024
CVE-2024-31293 CVE record

CVSS 4.3 Medium

WordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerability
- Easy Digital Downloads
- Cross-site request forgery (CSRF)
Not analysed yet 12 Apr 2024
CVE-2023-30869 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation
- Easy Digital Downloads
- Authentication bypass
Not analysed yet 2 May 2023
CVE-2023-0380 CVE record

CVSS 5.4 Medium

Easy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSS
- Easy Digital Downloads
Not analysed yet 21 Feb 2023
CVE-2022-3600 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection
- Easy Digital Downloads
Not analysed yet 21 Nov 2022
CVE-2022-33900 CVE record

CVSS 4.1 Medium

WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability
- Easy Digital Downloads
- Insecure deserialization
Not analysed yet 22 Aug 2022
CVE-2021-39354 CVE record

CVSS 4.8 Medium

Easy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site Scripting
- Easy Digital Downloads
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2021