agentprime: smub-easy-digital-downloads-ecommerce-payments-and-subscriptions-made-easyEvery new CVE for smub-easy-digital-downloads-ecommerce-payments-and-subscriptions-made-easy.https://agentprime.io/CVE-2026-120538: Easy Digital Downloads <= 3.7.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Guest Checkout Email Binding at PayPal Capturehttps://agentprime.io/advisories/CVE-2026-120538/https://agentprime.io/advisories/CVE-2026-120538/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 04:43:10 GMTCVECVE-2026-14335: Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parametershttps://agentprime.io/advisories/CVE-2026-14335/https://agentprime.io/advisories/CVE-2026-14335/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:31:07 GMTCVECVE-2026-12476: Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameterhttps://agentprime.io/advisories/CVE-2026-12476/https://agentprime.io/advisories/CVE-2026-12476/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 02:31:38 GMTCVECVE-2026-7533: Easy Digital Downloads <= 3.6.7 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameterhttps://agentprime.io/advisories/CVE-2026-7533/https://agentprime.io/advisories/CVE-2026-7533/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 05:30:41 GMTCVECVE-2025-14783: Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirecthttps://agentprime.io/advisories/CVE-2025-14783/https://agentprime.io/advisories/CVE-2025-14783/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Dec 2025 06:24:42 GMTCVECVE-2025-11271: Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulationhttps://agentprime.io/advisories/CVE-2025-11271/https://agentprime.io/advisories/CVE-2025-11271/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Nov 2025 04:36:22 GMTCVECVE-2025-8102: Easy Digital Downloads <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functionshttps://agentprime.io/advisories/CVE-2025-8102/https://agentprime.io/advisories/CVE-2025-8102/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Aug 2025 11:26:09 GMTCVECVE-2025-4670: Easy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcodehttps://agentprime.io/advisories/CVE-2025-4670/https://agentprime.io/advisories/CVE-2025-4670/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 May 2025 08:22:03 GMTCVECVE-2025-2252: Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosurehttps://agentprime.io/advisories/CVE-2025-2252/https://agentprime.io/advisories/CVE-2025-2252/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Mar 2025 07:04:54 GMTCVECVE-2024-13517: Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Titlehttps://agentprime.io/advisories/CVE-2024-13517/https://agentprime.io/advisories/CVE-2024-13517/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 18 Jan 2025 07:05:09 GMTCVECVE-2024-12875: Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Downloadhttps://agentprime.io/advisories/CVE-2024-12875/https://agentprime.io/advisories/CVE-2024-12875/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 21 Dec 2024 11:22:44 GMTCVECVE-2024-9654: Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypasshttps://agentprime.io/advisories/CVE-2024-9654/https://agentprime.io/advisories/CVE-2024-9654/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Dec 2024 11:10:18 GMTCVECVE-2022-2439: Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserializationhttps://agentprime.io/advisories/CVE-2022-2439/https://agentprime.io/advisories/CVE-2022-2439/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Sep 2024 03:06:38 GMTCVECVE-2024-6692: Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Texthttps://agentprime.io/advisories/CVE-2024-6692/https://agentprime.io/advisories/CVE-2024-6692/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Aug 2024 02:01:23 GMTCVECVE-2024-6691: Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settingshttps://agentprime.io/advisories/CVE-2024-6691/https://agentprime.io/advisories/CVE-2024-6691/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Aug 2024 02:01:19 GMTCVECVE-2024-2302: Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2024-2302/https://agentprime.io/advisories/CVE-2024-2302/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:58:30 GMTCVECVE-2024-0659: Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing optionshttps://agentprime.io/advisories/CVE-2024-0659/https://agentprime.io/advisories/CVE-2024-0659/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:21:35 GMTCVE