Vulnerabilities > Awesomemotive > Easy Digital Downloads

DATE CVE VULNERABILITY TITLE RISK
2019-08-16 CVE-2019-15116 Cross-site Scripting vulnerability in Awesomemotive Easy Digital Downloads
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.
network
low complexity
awesomemotive CWE-79
6.1
6.1
2019-08-16 CVE-2015-9324 SQL Injection vulnerability in Awesomemotive Easy Digital Downloads
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.
network
low complexity
awesomemotive CWE-89
critical
 9.8
9.8