Input validation vulnerability in Easy Digital Downloads – Simple eCommerce for Selling Digital Files 2.11.6

The Easy Digital Downloads WordPress plugin released before version 2.11.6 had a vulnerability that could have allowed someone with high levels of access on the website to perform a type of attack called “”Cross-Site Scripting”” if the website had certain restrictions in place. This vulnerability was related to the way the plugin stored and displayed the file name of downloadable files

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.