Radar sectionsPlugins & themes
Check my site

WordPress plugin

Easy Digital Downloads – Invoices security & vulnerabilities

edd-invoices— active installsLast vulnerability Apr 20, 2015

No known unpatched vulnerabilities in the latest version

All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

2Known vulnerabilities
  • Critical0
  • High0
  • Medium2
  • Low0
Vulnerabilities per year
2015: 2 vulnerabilities215

All Easy Digital Downloads – Invoices vulnerabilities

Easy Digital Downloads – Invoices vulnerabilities
SeverityVulnerabilityCVEPublished
Medium6.1Cross-Site Scripting
<1.0.4Update to 1.0.4
CVE-2015-9518
Medium6.1Cross-Site Scripting
≤1.0.3Update to 1.0.4
CVE-2015-9516

Easy Digital Downloads – Invoices: common questions

Does Easy Digital Downloads – Invoices have known vulnerabilities?

Yes. VulnCrest Radar lists 2 known vulnerabilities in Easy Digital Downloads – Invoices: 2 medium. None are known to affect version null.

How do I check which version of Easy Digital Downloads – Invoices I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Easy Digital Downloads – Invoices vulnerability?

CVE-2015-9518, published Apr 20, 2015: Easy Digital Downloads – PDF Invoices < 1.0.4 - Cross-Site Scripting. Severity: Medium (CVSS 6.1).

Is any Easy Digital Downloads – Invoices vulnerability listed in CISA KEV?

No. None of the known Easy Digital Downloads – Invoices vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?