Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Easy Digital Downloads — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in Easy Digital Downloads, with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities affecting the Easy Digital Downloads WordPress plugin, categorized under the software weakness type of common vulnerabilities and exposures for the WordPress ecosystem. It aggregates a comprehensive collection of security advisories, bug reports, and identified flaw entries that pertain specifically to this popular e-commerce solution for digital products, covering incidents from its early releases through recent updates to ensure historical continuity. Readers can utilize this resource to track a vendor's advisories as they are published, understand a weakness class by observing how specific technical flaws manifest in this codebase, or look up a product's vulnerability history to assess long-term security posture and patch management effectiveness. By consolidating these disparate reports into a single accessible location, the page serves as a vital reference for developers, site administrators, and security researchers who need to evaluate the risk profile of Easy Digital Downloads installations. This structured approach allows users to identify patterns in recurring issues, such as cross-site scripting or authorization bypasses, without needing to scour multiple external sources or forum threads. The information provided here is strictly factual and intended to support informed decision-making regarding plugin updates, code audits, and system hardening strategies. Ultimately, this aggregation aims to improve transparency within the WordPress community by making security data more digestible and actionable for stakeholders responsible for maintaining digital storefronts powered by this specific tool.

Vendor: Easy Digital Downloads

CVE IDTitleCVSSSeverityPublished
CVE-2026-59524 WordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability CWE-288 6.5 Medium2026-07-23
CVE-2026-39503 WordPress Easy Digital Downloads plugin <= 3.6.5 - Broken Access Control vulnerability CWE-862 7.5 High2026-06-15
CVE-2023-40005 WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control CWE-862 5.3 Medium2024-12-13
CVE-2024-43162 WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability CWE-862 4.3 Medium2024-11-01
CVE-2024-5057 WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability CWE-89 9.3 Critical2024-08-29
CVE-2024-32100 WordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerability CWE-200 5.3 Medium2024-05-13
CVE-2024-31113 WordPress Easy Digital Downloads plugin <= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2024-05-10
CVE-2024-31293 WordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2024-04-12
CVE-2023-30869 WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation CWE-287 9.8 Critical2023-05-02
CVE-2023-0380 Easy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSS 5.4 -2023-02-21
CVE-2022-3600 Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection 9.8 -2022-11-21
CVE-2022-33900 WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability 4.1 Medium2022-08-22
CVE-2021-39354 Easy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site Scripting CWE-79 4.8 Medium2021-10-21

All 13 known CVE vulnerabilities affecting Easy Digital Downloads with full Chinese analysis, references, and POCs where available.