Easy Digital Downloads

Unauthenticated Private Post Title Disclosure vulnerability <= 3.3.6.1

5.3

24 March, 2025

Authenticated (Admin+) Stored CrossSite Scripting via Title vulnerability <= 3.3.2

5.9

20 January, 2025

Authenticated (Admin+) Arbitrary File Download vulnerability <= 3.3.2

4.9

23 December, 2024

3.3.4 Improper Authorization to Paywall Bypass vulnerability 3.1-3.3.4

3.7

16 December, 2024

Authenticated (Admin+) PHAR Deserialization vulnerability <= 3.3.3

6.6

24 September, 2024