CVE-2024-31293mediumCWE-352

CVE-2024-31293: falha de média gravidade em Easy Digital Downloads

WordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Easy Digital Downloads

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.6.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Easy Digital Downloads · Easy Digital Downloads
CVEs relacionadas — Easy Digital Downloads

No mesmo produto, das mais perigosas para as menos.

CVE-2023-30869CRITICALWordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege EscalationEPSS 3.1%CVE-2024-5057CRITICALWordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerabilityEPSS 2.6%CVE-2021-39354MEDIUMEasy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site ScriptingEPSS 0.9%CVE-2022-33900MEDIUMWordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerabilityEPSS 0.9%CVE-2024-32100MEDIUMWordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerabilityEPSS 0.6%CVE-2024-43162MEDIUMWordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerabilityEPSS 0.5%