Vulnerabilities (CVE)

Filtered by vendor Awesomemotive Subscribe
Total 64 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-9507 2 Awesomemotive, Easydigitaldownloads 2 Easy Digital Downloads, Attach Accounts To Orders 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
The Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
CVE-2015-9506 2 Awesomemotive, Easydigitaldownloads 2 Easy Digital Downloads, Amazon S3 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
The Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
CVE-2015-9505 1 Awesomemotive 1 Easy Digital Downloads 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused.
CVE-2015-9324 1 Awesomemotive 1 Easy Digital Downloads 2026-06-17 7.5 HIGH 9.8 CRITICAL
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.