The Easy Digital Downloads (EDD) Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Edd Recurring Payments Plugin | — | Update edd-recurring-payments plugin to version 2.3.1, or a newer patched version | May 15, 2025 | Apr 20, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub