awesomemotive Vulnerability Advisory Catalog

Total 64 security vulnerabilities recorded for awesomemotive software and firmware.

← Back to All Vendors
CVE-2025-4670 MEDIUM
Component: easy_digital_downloads

The Easy Digital Downloads โ€“ eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...

๐Ÿ“… 2025-05-29
CVSS 6.4 Dossier →
CVE-2025-2252 MEDIUM
Component: easy_digital_downloads

The Easy Digital Downloads โ€“ eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in al...

๐Ÿ“… 2025-03-25
CVSS 5.3 Dossier →
Component: easy_digital_downloads

The Easy Digital Downloads โ€“ eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...

๐Ÿ“… 2025-01-18
CVSS 4.4 Dossier →
Component: easy_digital_downloads

The Easy Digital Downloads โ€“ eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Directory Traversal in all versions ...

๐Ÿ“… 2024-12-21
CVSS 4.9 Dossier →
Component: easy_digital_downloads

The Easy Digital Downloads plugin for WordPress is vulnerable to Improper Authorization in versions 3.1 through 3.3.4. This is due to a lack of suffic...

๐Ÿ“… 2024-12-17
CVSS 3.7 Dossier →
Component: easy_digital_downloads

Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Contr...

๐Ÿ“… 2024-12-13
CVSS 5.3 Dossier →
Component: easy_digital_downloads

Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec...

๐Ÿ“… 2024-11-01
CVSS 4.3 Dossier →
Component: easy_digital_downloads

The Easy Digital Downloads โ€“ Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via t...

๐Ÿ“… 2024-09-24
CVSS 7.2 Dossier →
CVE-2024-5057 CRITICAL
Component: easy_digital_downloads

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This...

๐Ÿ“… 2024-08-29
CVSS 9.3 Dossier →
Component: easy_digital_downloads

The Easy Digital Downloads โ€“ Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Stored Cr...

๐Ÿ“… 2024-08-12
CVSS 3.3 Dossier →
CVE-2024-6691 MEDIUM
Component: easy_digital_downloads

The Easy Digital Downloads โ€“ Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Stored Cr...

๐Ÿ“… 2024-08-12
CVSS 4.4 Dossier →
CVE-2024-2302 MEDIUM
Component: easy_digital_downloads

The Easy Digital Downloads โ€“ Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Sensitive...

๐Ÿ“… 2024-04-09
CVSS 5.3 Dossier →
CVE-2024-0659 MEDIUM
Component: easy_digital_downloads

The Easy Digital Downloads โ€“ Sell Digital Files (eCommerce Store & Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripti...

๐Ÿ“… 2024-02-05
CVSS 5.5 Dossier →
Component: easy_digital_downloads

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads โ€“ ...

๐Ÿ“… 2024-02-01
CVSS 6.5 Dossier →
CVE-2018-25095 CRITICAL
Component: duplicator

The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration file...

๐Ÿ“… 2024-01-08
CVSS 9.8 Dossier →
Component: duplicator

The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-lite/tmp` d...

๐Ÿ“… 2023-12-26
CVSS 7.5 Dossier →
Component: wp_mail_logging

The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.11.1 due ...

๐Ÿ“… 2023-07-12
CVSS 7.2 Dossier →
Component: duplicator

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Awesome Motive Duplicator Pro plugin <=ย 4.5.11 versions....

๐Ÿ“… 2023-05-28
CVSS 7.1 Dossier →
CVE-2023-30869 CRITICAL
Component: easy_digital_downloads

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation.ย This issue affects Easy Digital Downloads:...

๐Ÿ“… 2023-05-02
CVSS 9.8 Dossier →
CVE-2022-3600 CRITICAL
Component: easy_digital_downloads

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection....

๐Ÿ“… 2022-11-21
CVSS 9.8 Dossier →
CVE-2022-2387 MEDIUM
Component: easy_digital_downloads

The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the p...

๐Ÿ“… 2022-11-07
CVSS 4.3 Dossier →
Component: easy_digital_downloads

PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress....

๐Ÿ“… 2022-08-22
CVSS 4.1 Dossier →
CVE-2022-2552 MEDIUM
Component: duplicator

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server...

๐Ÿ“… 2022-08-22
CVSS 5.3 Dossier →
Component: duplicator

The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of th...

๐Ÿ“… 2022-08-22
CVSS 7.5 Dossier →
Page 1 of 3 (64 Total Records)