CVE-2022-33900mediumCWE-502

CVE-2022-33900: falha de média gravidade em Easy Digital Downloads

WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Easy Digital Downloads

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.1epss 0.9%
PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
Easy Digital Downloads · Easy Digital Downloads
CVEs relacionadas — Easy Digital Downloads

No mesmo produto, das mais perigosas para as menos.

CVE-2023-30869CRITICALWordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege EscalationEPSS 3.1%CVE-2024-5057CRITICALWordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerabilityEPSS 2.6%CVE-2021-39354MEDIUMEasy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site ScriptingEPSS 0.9%CVE-2024-32100MEDIUMWordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerabilityEPSS 0.6%CVE-2024-43162MEDIUMWordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-31293MEDIUMWordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%