Vulnerabilities > Awesomemotive > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-12-13 | CVE-2023-40005 | Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads Missing Authorization vulnerability in Easy Digital Downloads Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.1.5. | 9.8 |
2024-08-29 | CVE-2024-5057 | SQL Injection vulnerability in Awesomemotive Easy Digital Downloads Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12. | 9.8 |
2023-05-02 | CVE-2023-30869 | Improper Authentication vulnerability in Awesomemotive Easy Digital Downloads Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. | 9.8 |
2022-11-21 | CVE-2022-3600 | Unspecified vulnerability in Awesomemotive Easy Digital Downloads The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection. | 9.8 |
2019-08-16 | CVE-2015-9324 | SQL Injection vulnerability in Awesomemotive Easy Digital Downloads The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection. | 9.8 |