Easy Digital Downloads

CrossSite Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions vulnerability <= 3.5.0

5.4

1 day ago

Authenticated (Contributor+) Stored CrossSite Scripting via edd_receipt Shortcode vulnerability <= 3.3.8.1

6.5

28 May, 2025

Unauthenticated Private Post Title Disclosure vulnerability <= 3.3.6.1

5.3

24 March, 2025

Authenticated (Admin+) Stored CrossSite Scripting via Title vulnerability <= 3.3.2

5.9

20 January, 2025

Authenticated (Admin+) Arbitrary File Download vulnerability <= 3.3.2

4.9

23 December, 2024