easy-digital-downloads vulnerabilities

CVEs whose affected-version data names the easy-digital-downloads package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-116403Medium· 5.9

4d ago

WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Leveraging Race Conditions.This issue affects Easy Digital Do…

▾ SunlitAwesomemotive · easy-digital-downloadsEPSS 0.24%via CVEORG

CVE-2026-42638High· 7.5

3w ago

Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1.

Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1.

▾ TwilightAwesomemotive · easy-digital-downloadsEPSS 0.25%via NVD

CVE-2026-95522High· 7.6

1mo ago

Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.

▾ TwilightSyed Balkhi · easy-digital-downloadsEPSS 0.38%via NVD