Vulnerabilities > Sandhillsdev > High

DATE CVE VULNERABILITY TITLE RISK
2022-08-22 CVE-2022-33900 Deserialization of Untrusted Data vulnerability in Sandhillsdev Easy Digital Downloads
PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.
network
low complexity
sandhillsdev CWE-502
7.2
2019-08-16 CVE-2015-9324 SQL Injection vulnerability in Sandhillsdev Easy Digital Downloads
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.
network
low complexity
sandhillsdev CWE-89
7.5