Easy Digital Downloads

Authenticated (Contributor+) Stored CrossSite Scripting via edd_receipt Shortcode vulnerability <= 3.3.8.1

6.5

28 May, 2025

Unauthenticated Private Post Title Disclosure vulnerability <= 3.3.6.1

5.3

24 March, 2025

Authenticated (Admin+) Stored CrossSite Scripting via Title vulnerability <= 3.3.2

5.9

20 January, 2025

Authenticated (Admin+) Arbitrary File Download vulnerability <= 3.3.2

4.9

23 December, 2024

3.3.4 Improper Authorization to Paywall Bypass vulnerability 3.1-3.3.4

3.7

16 December, 2024