AW
Vendor
Awesomemotive
70
CVEs
1
On KEV
2
New 30D
Products
ED9.8
Easy Digital Downloads
Awesomemotive
58 CVEs0 on KEV2 new
DU9.8
Duplicator
Awesomemotive
8 CVEs1 on KEV0 new
CF7.5
Contact Form by WPForms
Awesomemotive
1 CVEs0 on KEV0 new
EP6.5
Envira Photo Gallery
Awesomemotive
1 CVEs0 on KEV0 new
NG9.3
NextGEN Gallery
awesomemotive
1 CVEs0 on KEV0 new
WM6.1
WP Mail Logging
Awesomemotive
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116403 New | ED Easy Digital Downloads Awesomemotive | 5.9 | Oct 26 | WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability |
| CVE-2026-42638 | ED Easy Digital Downloads Awesomemotive | 7.5 | Oct 6 | WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability |
| CVE-2026-54190 | EP Envira Photo Gallery Awesomemotive | 6.5 | Jun 16 | WordPress Envira Photo Gallery plugin <= 1.12.5 - Broken Access Control vulnerability |
| CVE-2026-48835 | CF Contact Form by WPForms Awesomemotive | 7.5 | Jun 15 | WordPress Contact Form by WPForms plugin <= 1.10.0.4 - Broken Access Control vulnerability |
| CVE-2026-39503 | ED Easy Digital Downloads Awesomemotive | 7.5 | Jun 15 | WordPress Easy Digital Downloads plugin <= 3.6.5 - Broken Access Control vulnerability |
| CVE-2026-9059 | NG NextGEN Gallery awesomemotive | 9.3 | May 20 | NextGEN Gallery - SQL Injection |
| CVE-2025-4670 | ED Easy Digital Downloads Awesomemotive | 5.4 | May 29 | Easy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode |
| CVE-2025-2252 | ED Easy Digital Downloads Awesomemotive | 5.3 | Mar 25 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure |
| CVE-2024-13517 | ED Easy Digital Downloads Awesomemotive | 4.0 | Jan 18 | Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Title |
| CVE-2024-12875 | ED Easy Digital Downloads Awesomemotive | 4.9 | Dec 21 | Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download |
| CVE-2024-9654 | ED Easy Digital Downloads Awesomemotive | 3.7 | Dec 17 | Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass |
| CVE-2023-40005 | ED Easy Digital Downloads Awesomemotive | 9.8 | Dec 13 | WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control |
| CVE-2024-43162 | ED Easy Digital Downloads Awesomemotive | 8.8 | Nov 1 | WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability |
| CVE-2022-2439 | ED Easy Digital Downloads Awesomemotive | 7.2 | Sep 24 | Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserialization |
| CVE-2024-5057 | ED Easy Digital Downloads Awesomemotive | 9.8 | Aug 29 | WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability |
| CVE-2024-6692 | ED Easy Digital Downloads Awesomemotive | 3.1 | Aug 10 | Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text |
| CVE-2024-6691 | ED Easy Digital Downloads Awesomemotive | 4.0 | Aug 10 | Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settings |
| CVE-2024-2302 | ED Easy Digital Downloads Awesomemotive | 5.3 | Apr 9 | Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure |
| CVE-2024-0659 | ED Easy Digital Downloads Awesomemotive | 4.8 | Feb 5 | Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options |
| CVE-2023-51684 | ED Easy Digital Downloads Awesomemotive | 5.4 | Feb 1 | WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2018-25095 | DU Duplicator Awesomemotive | 9.8 | Jan 8 | Duplicator < 1.3.0 - Unauthenticated RCE |
| CVE-2023-6114 | DU Duplicator Awesomemotive | 7.5 | Dec 26 | Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure |
| CVE-2023-3081 | WM WP Mail Logging Awesomemotive | 6.1 | Jul 12 | WP Mail Logging <= 1.11.1 - Unauthenticated Stored Cross-Site Scripting via Email |
| CVE-2023-33309 | DU Duplicator Awesomemotive | 6.1 | May 28 | WordPress Duplicator Pro Plugin <= 4.5.11 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-30869 | ED Easy Digital Downloads Awesomemotive | 9.8 | May 2 | Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth |
| CVE-2022-3600 | ED Easy Digital Downloads Awesomemotive | 9.8 | Nov 21 | The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection |
| CVE-2022-2387 | ED Easy Digital Downloads Awesomemotive | 4.3 | Nov 7 | The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually… |
| CVE-2022-33900 | ED Easy Digital Downloads Awesomemotive | 7.2 | Aug 22 | PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress |
| CVE-2022-2552 | DU Duplicator Awesomemotive | 5.3 | Aug 22 | The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and… |
| CVE-2022-2551 | DU Duplicator Awesomemotive | 7.5 | Aug 22 | The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer… |
| CVE-2022-0707 | ED Easy Digital Downloads Awesomemotive | 4.3 | Apr 18 | The Easy Digital Downloads WordPress plugin before 2.11.6 does not have CSRF check in place when inserting payment notes, which could allow attackers to make a logged admin insert… |
| CVE-2022-0706 | ED Easy Digital Downloads Awesomemotive | 4.8 | Apr 18 | The Easy Digital Downloads WordPress plugin before 2.11.6 does not sanitise and escape the Downloadable File Name in the Logs, which could allow high privilege users to perform… |
| CVE-2021-39354 | ED Easy Digital Downloads Awesomemotive | 4.8 | Oct 21 | The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $start_date and $end_date parameters found in the… |
| CVE-2020-11738 In wildKEV | DU Duplicator Awesomemotive | 7.5 | Apr 13 | WordPress Snap Creek Duplicator Plugin File Download Vulnerability |
| CVE-2015-9524 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… |
| CVE-2015-9523 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… |
| CVE-2015-9522 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… |
| CVE-2015-9521 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… |
| CVE-2015-9520 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… |
| CVE-2015-9519 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) PDF Stamper extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… |
| CVE-2015-9518 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… |
| CVE-2015-9517 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… |
| CVE-2015-9516 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… |
| CVE-2015-9515 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) htaccess Editor extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… |
| CVE-2015-9514 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Free Downloads extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… |
| CVE-2015-9513 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… |
| CVE-2015-9512 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… |
| CVE-2015-9511 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before… |
| CVE-2015-9510 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Cross-sell Upsell extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… |
| CVE-2015-9509 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Content Restriction extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11,… |
| CVE-2015-9508 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Commissions extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… |
| CVE-2015-9507 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before… |
| CVE-2015-9506 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… |
| CVE-2015-9505 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for… |
| CVE-2015-9536 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… |
| CVE-2015-9535 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… |
| CVE-2015-9534 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9,… |
| CVE-2015-9533 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… |
| CVE-2015-9532 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before… |
| CVE-2015-9531 | ED Easy Digital Downloads Awesomemotive | 6.1 | Oct 23 | The Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x… |
