Vulnerability history

Broken Access Control vulnerability

Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settings vulnerability

Unvalidated Redirect in Password Reset Flow via edd_redirect vulnerability

Insufficient Verification to Order Manipulation vulnerability

Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode vulnerability

Unauthenticated Private Post Title Disclosure vulnerability

Authenticated (Admin+) Stored Cross-Site Scripting via Title vulnerability

Authenticated (Admin+) Arbitrary File Download vulnerability

Improper Authorization to Paywall Bypass vulnerability

Authenticated (Admin+) PHAR Deserialization vulnerability

Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text vulnerability

Broken Access Control vulnerability

SQL Injection vulnerability

Sensitive Data Exposure vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Sensitive Information Exposure vulnerability

Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options vulnerability

Cross Site Scripting (XSS) vulnerability

Broken Access Control

Cross-Site Request Forgery Leading To Plugin Upgrade Vulnerability

Unauthenticated Privilege Escalation Vulnerability

Contributor+ Stored XSS Vulnerability

Unauthenticated SQL Injection Vulnerability

Unauth. CSV Injection vulnerability

Arbitrary Post Deletion via Cross-Site Request Forgery (CSRF) vulnerability

PHP Object Injection vulnerability

Stored Cross-Site Scripting (XSS) vulnerability

Arbitrary Payment Note Insertion via Cross-Site Request Forgery (CSRF) vulnerability

Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Stored Cross-Site Scripting (XSS) vulnerability

Information Disclosure Vulnerability

PHP Object Injection