Product by Smub

    Easy Digital Downloads – Ecommerce Payments And Subscriptions Made Easy

    17 known vulnerabilities in Easy Digital Downloads – Ecommerce Payments And Subscriptions Made Easy (Smub), 0 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Easy Digital Downloads – Ecommerce Payments And Subscriptions Made Easy (Smub)
    HighCVE-2026-12476

    Unrestricted Upload of File with Dangerous Type (CVE-2026-12476)

    		7.2
    HighCVE-2026-120538

    Improper Authentication (CVE-2026-120538)

    		8.1
    HighCVE-2026-14335

    Cross-site Scripting (CVE-2026-14335)

    		7.2
    HighCVE-2022-2439

    Awesomemotive Easy Digital Downloads: Deserialization of Untrusted Data

    also in 1 other product

    		7.2
    MediumCVE-2024-12875

    Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download

    also in 1 other product

    		4.9
    MediumCVE-2024-2302

    Awesomemotive Easy Digital Downloads: Insertion of Sensitive Information into Log File

    also in 1 other product

    		5.3
    MediumCVE-2025-4670

    Awesomemotive Easy Digital Downloads: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2025-2252

    Awesomemotive Easy Digital Downloads: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		5.3
    MediumCVE-2025-11271

    Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation

    		5.3
    MediumCVE-2024-0659

    Awesomemotive Easy Digital Downloads: Cross-site Scripting

    also in 1 other product

    		5.5
    MediumCVE-2025-14783

    Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect

    		4.3
    MediumCVE-2026-7533

    Cross-Site Request Forgery (CSRF) (CVE-2026-7533)

    		4.3
    MediumCVE-2025-8102

    Cross-Site Request Forgery (CSRF) (CVE-2025-8102)

    		5.4
    MediumCVE-2024-6691

    Awesomemotive Easy Digital Downloads: Cross-site Scripting

    also in 1 other product

    		4.4
    LowCVE-2024-9654

    Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass

    also in 1 other product

    		3.7
    MediumCVE-2024-13517

    Awesomemotive Easy Digital Downloads: Cross-site Scripting

    also in 1 other product

    		4.4
    LowCVE-2024-6692

    Awesomemotive Easy Digital Downloads: Cross-site Scripting

    also in 1 other product

    		3.3

    All products by Smub