← Back

Awesomemotive

awesomemotive

64 CVEs • 3 products

Products (3)

Click to collapse
Toggle

CVEs (64)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Awesomemotive
1Easy Digital Downloads
Feb 7, 2025
Aug 16, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.
1Awesomemotive
1Easy Digital Downloads
Feb 7, 2025
Aug 16, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.
1Awesomemotive
1Duplicator
Feb 2, 2026
Sep 19, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php during the database setup...Show more
An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution.Show less
1Awesomemotive
1Duplicator
Feb 2, 2026
Mar 26, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the json parameter.