Easy Digital Downloads – eCommerce Payments and Subscriptions made easy vulnerabilities

Product

Easy Digital Downloads – eCommerce Payments and Subscriptions made easy

by smub · last CVE Oct 10, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 11Low 2

Severity

Exploitation

Watch

Add Easy Digital Downloads – eCommerce Payments and Subscriptions made easy to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-9654	3.7	0%	Dec 17	Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass Affected: 3.1 through 3.3.4
CVE-2024-6692	3.1	0%	Aug 10	Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text Affected: through 3.3.2