Medium severity6.1NVD Advisory· Published Oct 23, 2019· Updated Jun 17, 2026

CVE-2015-9528

Description

The Easy Digital Downloads (EDD) Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Awesomemotive/Easy Digital Downloads
cpe:2.3:a:awesomemotive:easy_digital_downloads:*:*:*:*:*:wordpress:*:*
Range: >=1.8,<1.8.7
Easydigitaldownloads/Software Licensing
cpe:2.3:a:easydigitaldownloads:software_licensing:-:*:*:*:*:easy_digital_downloads:*:*
Easy Digital Downloads/Software Licensing extensiondescription
WordPress/Easy Digital Downloadsllm-fuzzy
Range: <1.8.7, <1.9.10, <2.0.5, <2.1.11, <2.2.9, <2.3.7
Package: https://wordpress.org/plugins/easy-digital-downloads

Patches

Vulnerability mechanics

References

web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000