Easy Digital Downloads – Simple Ecommerce For Selling Digital Files
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:easy_digital_downloads_–_simple_ecommerce_for_selling_digital_files:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Easy Digital Downloads – Simple Ecommerce For Selling Digital Files (167979ed-34ae-5a07-b01f-bf3ad4eca337) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-2387 |
vulnerable | 2026-06-08 05:43:35.442968 |
Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF
The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete arbitrary post via a CSRF attack
Published: 2022-11-07T00:00:00.000Z
Updated: 2025-05-05T20:26:52.592Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0707 |
vulnerable | 2026-06-08 05:39:10.579782 |
Easy Digital Downloads < 2.11.6 - Arbitrary Payment Note Insertion via CSRF
The Easy Digital Downloads WordPress plugin before 2.11.6 does not have CSRF check in place when inserting payment notes, which could allow attackers to make a logged admin insert arbitrary notes via a CSRF attack
Published: 2022-04-18T17:10:31.000Z
Updated: 2024-08-02T23:40:03.425Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0706 |
vulnerable | 2026-06-08 05:39:10.576068 |
Easy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site Scripting
The Easy Digital Downloads WordPress plugin before 2.11.6 does not sanitise and escape the Downloadable File Name in the Logs, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
Published: 2022-04-18T17:10:29.000Z
Updated: 2024-08-02T23:40:03.531Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.