# Awesomemotive Easy Digital Downloads


- [CVE-2023-30869](https://insights.sbomify.com/CVE-2023-30869/): WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation (critical 9.8)
- [CVE-2022-3600](https://insights.sbomify.com/CVE-2022-3600/): Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection (critical 9.8)
- [CVE-2015-9324](https://insights.sbomify.com/CVE-2015-9324/): SQL injection in n/a (critical 9.8)
- [CVE-2024-5057](https://insights.sbomify.com/CVE-2024-5057/): WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability (critical 9.3)
- [CVE-2022-2439](https://insights.sbomify.com/CVE-2022-2439/): Deserialization in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy (high 7.2)
- [CVE-2023-51684](https://insights.sbomify.com/CVE-2023-51684/): WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2025-4670](https://insights.sbomify.com/CVE-2025-4670/): Easy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode (medium 6.4)
- [CVE-2015-9505](https://insights.sbomify.com/CVE-2015-9505/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-9506](https://insights.sbomify.com/CVE-2015-9506/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-9507](https://insights.sbomify.com/CVE-2015-9507/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-9508](https://insights.sbomify.com/CVE-2015-9508/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-9509](https://insights.sbomify.com/CVE-2015-9509/): Cross-site scripting in n/a (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/products/awesomemotive/easy-digital-downloads/