Known vulnerabilities in smub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-120538 | The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator… | 8.1 High | Nov 3, 2026 |
| CVE-2026-14335 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored… | 7.2 High | Oct 10, 2026 |
| CVE-2026-12476 | The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including… | 7.2 High | Jul 29, 2026 |
| CVE-2026-7533 | The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… | 4.3 Medium | May 28, 2026 |
| CVE-2025-14783 | The Easy Digital Downloads plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and… | 4.3 Medium | Dec 31, 2025 |
| CVE-2025-11271 | The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and… | 5.3 Medium | Nov 6, 2025 |
| CVE-2025-8102 | The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… | 5.4 Medium | Aug 20, 2025 |
| CVE-2025-4670 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored… | 6.4 Medium | May 29, 2025 |
| CVE-2025-2252 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to… | 5.3 Medium | Mar 25, 2025 |
| CVE-2024-13517 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored… | 4.4 Medium | Jan 18, 2025 |
| CVE-2024-12875 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to… | 4.9 Medium | Dec 21, 2024 |
| CVE-2024-9654 | The Easy Digital Downloads plugin for WordPress is vulnerable to Improper Authorization in versions 3.1 through 3.3.4 | 3.7 Low | Dec 17, 2024 |
| CVE-2022-2439 | The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to… | 7.2 High | Sep 24, 2024 |
| CVE-2024-6692 | The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for… | 3.3 Low | Aug 10, 2024 |
| CVE-2024-6691 | The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for… | 4.4 Medium | Aug 10, 2024 |
| CVE-2024-2302 | The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for… | 5.3 Medium | Apr 9, 2024 |
| CVE-2024-0659 | The Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) plugin for WordPress is… | 5.5 Medium | Feb 5, 2024 |
Other smub products
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery 10
Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More 8
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic 7
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More 7
WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More 6
Sydney Toolbox 5
WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 4
aThemes Addons for Elementor 4
Gallery Plugin for WordPress – Envira Photo Gallery 4
Custom Twitter Feeds – A Tweets Widget or X Feed Widget 4
ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) 4
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) 3