Vendor

    Awesomemotive

    71 known vulnerabilities in products by Awesomemotive, 1 of them actively exploited (CISA KEV).

    Key figures

    71

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Awesomemotive
    CriticalCVE-2020-11738

    WordPress Snap Creek Duplicator Plugin File Download Vulnerability

    In CISA KEV

    		7.5
    CriticalCVE-2018-17207

    Awesomemotive Duplicator: Code Execution

    		9.8
    HighCVE-2023-6114

    Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

    		7.5
    HighCVE-2022-2551

    Duplicator < 1.4.7 - Unauthenticated Backup Download

    		7.5
    CriticalCVE-2023-30869

    WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation

    also in 1 other product

    		9.8
    CriticalCVE-2024-5057

    WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability

    also in 1 other product

    		9.3
    MediumCVE-2022-2552

    Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure

    		5.3
    CriticalCVE-2015-9324

    Awesomemotive Easy Digital Downloads: SQL Injection

    		9.8
    MediumCVE-2018-7543

    Awesomemotive Duplicator: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2022-3600

    Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection

    		9.8
    CriticalCVE-2018-25095

    Duplicator < 1.3.0 - Unauthenticated RCE

    		9.8
    HighCVE-2026-42638

    WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability

    		7.5
    CriticalCVE-2026-9059

    NextGEN Gallery - SQL Injection

    		—
    HighCVE-2026-54851

    WordPress Contact Form by WPForms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2022-2439

    Awesomemotive Easy Digital Downloads: Deserialization of Untrusted Data

    also in 1 other product

    		7.2
    MediumCVE-2024-12875

    Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download

    also in 1 other product

    		4.9
    MediumCVE-2019-15116

    Awesomemotive Easy Digital Downloads: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2026-116403

    WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability

    		5.9
    HighCVE-2026-48835

    WordPress Contact Form by WPForms plugin <= 1.10.0.4 - Broken Access Control vulnerability

    		7.5
    HighCVE-2023-3081

    WP Mail Logging <= 1.11.1 - Unauthenticated Stored Cross-Site Scripting via Email

    also in 1 other product

    		7.2
    MediumCVE-2015-9506

    Awesomemotive Easy Digital Downloads: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2015-9508

    Awesomemotive Easy Digital Downloads: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2015-9510

    Awesomemotive Easy Digital Downloads: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2015-9511

    Awesomemotive Easy Digital Downloads: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2015-9512

    Awesomemotive Easy Digital Downloads: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1

    All vulnerabilities in search

    Products

    Products by Awesomemotive
    Easy Digital Downloads580
    Duplicator81