Vulnerabilities > Awesomemotive > Easy Digital Downloads > 3.1

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-01	CVE-2023-51684	Cross-site Scripting vulnerability in Awesomemotive Easy Digital Downloads Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) allows Stored XSS.This issue affects Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy): from n/a through 3.2.5. network low complexity awesomemotive CWE-79	5.4
2023-05-02	CVE-2023-30869	Improper Authentication vulnerability in Awesomemotive Easy Digital Downloads Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. network low complexity awesomemotive CWE-287 critical	9.8
2022-11-21	CVE-2022-3600	Unspecified vulnerability in Awesomemotive Easy Digital Downloads The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection. network low complexity awesomemotive critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.