sandhillsdev Vulnerabilities and Affected Products
Vulnerabilities associated with easy_digital_downloads.
Products
Clear product- easy_digital_downloads1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-23489CRITICAL | sandhillsdev easy_digital_downloads Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edd_download_search' action. | CVSS9.8v3.1 | EPSS11.2% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |