Awesomemotive Easy Digital Downloads vulnerabilities
56 known vulnerabilities affecting awesomemotive/easy_digital_downloads.
Total CVEs
56
CISA KEV
0
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL5HIGH4MEDIUM45LOW2
Vulnerabilities
Page 2 of 3
CVE-2015-9527P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9527 [MEDIUM] CWE-79 CVE-2015-9527: The Easy Digital Downloads (EDD) Simple Shipping extension for WordPress, as used with EDD 1.8.x bef
The Easy Digital Downloads (EDD) Simple Shipping extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9526P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9526 [MEDIUM] CWE-79 CVE-2015-9526: The Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.
The Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9533P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9533 [MEDIUM] CWE-79 CVE-2015-9533: The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1
The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9517P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9517 [MEDIUM] CWE-79 CVE-2015-9517: The Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x be
The Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9534P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9534 [MEDIUM] CWE-79 CVE-2015-9534: The Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9
The Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9536P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9536 [MEDIUM] CWE-79 CVE-2015-9536: The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.
The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9523P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9523 [MEDIUM] CWE-79 CVE-2015-9523: The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.
The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9521P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9521 [MEDIUM] CWE-79 CVE-2015-9521: The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.
The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9513P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9513 [MEDIUM] CWE-79 CVE-2015-9513: The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.
The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9519P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9519 [MEDIUM] CWE-79 CVE-2015-9519: The Easy Digital Downloads (EDD) PDF Stamper extension for WordPress, as used with EDD 1.8.x before
The Easy Digital Downloads (EDD) PDF Stamper extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9506P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9506 [MEDIUM] CWE-79 CVE-2015-9506: The Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.
The Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9507P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9507 [MEDIUM] CWE-79 CVE-2015-9507: The Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD
The Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9520P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9520 [MEDIUM] CWE-79 CVE-2015-9520: The Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x
The Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9529P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9529 [MEDIUM] CWE-79 CVE-2015-9529: The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7
The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9518P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9518 [MEDIUM] CWE-79 CVE-2015-9518: The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before
The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9505P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9505 [MEDIUM] CWE-79 CVE-2015-9505: The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x befor
The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused.
nvd
CVE-2015-9511P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9511 [MEDIUM] CWE-79 CVE-2015-9511: The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with
The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9531P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9531 [MEDIUM] CWE-79 CVE-2015-9531: The Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1
The Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9516P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9516 [MEDIUM] CWE-79 CVE-2015-9516: The Easy Digital Downloads (EDD) Invoices extension for WordPress, as used with EDD 1.8.x before 1.8
The Easy Digital Downloads (EDD) Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd
CVE-2015-9524P4MEDIUMCVSS 6.1≥ 1.8, < 1.8.7≥ 1.9, < 1.9.10+4 more2019-10-23
CVE-2015-9524 [MEDIUM] CWE-79 CVE-2015-9524: The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x be
The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
nvd