Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9505)
The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9505
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9536)
The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9536
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9535)
The Easy Digital Downloads (EDD) Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9535
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9534)
The Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9534
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9533)
The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9533
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9532)
The Easy Digital Downloads (EDD) Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9532
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9531)
The Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9531
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9530)
The Easy Digital Downloads (EDD) Upload File extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9530
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9529)
The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9529
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9528)
The Easy Digital Downloads (EDD) Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9528
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9527)
The Easy Digital Downloads (EDD) Simple Shipping extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9527
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9526)
The Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9526
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2015-9525)
The Easy Digital Downloads (EDD) Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
PLUGIN
Easy Digital Downloads
CVE-2015-9525
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2019-15116)
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.
PLUGIN
Easy Digital Downloads
CVE-2019-15116
Risk Score
Threat Entry
Updated 2026-06-17
Easy Digital Downloads - SQL Injection (CVE-2015-9324)
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.
PLUGIN
Easy Digital Downloads
CVE-2015-9324
Risk Score