Easy Digital Downloads

Authenticated (Admin+) Arbitrary File Download vulnerability <= 3.3.2

4.9

23 December, 2024

3.3.4 Improper Authorization to Paywall Bypass vulnerability 3.1-3.3.4

3.7

16 December, 2024

Authenticated (Admin+) PHAR Deserialization vulnerability <= 3.3.3

6.6

24 September, 2024

Authenticated (Admin+) Stored CrossSite Scripting via Agreement Text vulnerability <= 3.3.2

5.9

12 August, 2024

Broken Access Control vulnerability <= 3.2.12

4.3

7 August, 2024