Known vulnerabilities in the Easy Digital Downloads plugin
72 security advisories have been published for the Easy Digital Downloads plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Easy Digital Downloads - Security Vulnerability (CVE-2026-14335) HIGH
- Easy Digital Downloads - Security Vulnerability (CVE-2026-105190) MEDIUM
- Easy Digital Downloads - Security Vulnerability (CVE-2026-105194) MEDIUM
- Easy Digital Downloads - Security Vulnerability (CVE-2026-42638) HIGH
- Easy Digital Downloads - Remote Code Execution (CVE-2026-12476) HIGH
- Easy Digital Downloads - Security Vulnerability (CVE-2026-66476) MEDIUM
- Easy Digital Downloads - Security Vulnerability (CVE-2026-59524) MEDIUM
- Easy Digital Downloads - Broken Access Control (CVE-2026-39503) HIGH
- Easy Digital Downloads - Cross-Site Request Forgery (CSRF) (CVE-2026-7533) MEDIUM
- Easy Digital Downloads - Open Redirect (CVE-2025-14783) MEDIUM
- Easy Digital Downloads - Security Vulnerability (CVE-2025-11271) MEDIUM
- Easy Digital Downloads - Cross-Site Request Forgery (CSRF) (CVE-2025-8102) MEDIUM
- Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2025-4670) MEDIUM
- Easy Digital Downloads - Information Disclosure (CVE-2025-2252) MEDIUM
- Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2024-13517) MEDIUM
- Easy Digital Downloads - Path Traversal (CVE-2024-12875) MEDIUM
- Easy Digital Downloads - Security Vulnerability (CVE-2024-9654) LOW
- Easy Digital Downloads - Broken Access Control (CVE-2023-40005) MEDIUM
- Easy Digital Downloads - Broken Access Control (CVE-2024-43162) MEDIUM
- Easy Digital Downloads - PHP Object Injection (CVE-2022-2439) HIGH
- Easy Digital Downloads - SQL Injection (CVE-2024-5057) CRITICAL
- Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2024-6691) MEDIUM
- Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2024-6692) LOW
- Easy Digital Downloads - Path Traversal (CVE-2024-35629) CRITICAL
- Easy Digital Downloads - Information Disclosure (CVE-2024-32100) MEDIUM
- Easy Digital Downloads - Cross-Site Request Forgery (CSRF) (CVE-2024-31113) MEDIUM
- Easy Digital Downloads - Cross-Site Request Forgery (CSRF) (CVE-2024-31293) MEDIUM
- Easy Digital Downloads - Information Disclosure (CVE-2024-2302) MEDIUM
- Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2024-0659) MEDIUM
- Easy Digital Downloads - Cross-Site Scripting (XSS) (CVE-2023-51684) MEDIUM