Codepeople Sell Downloads — known CVE vulnerabilities

Every CVE whose affected-product data names Codepeople Sell Downloads, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2015-9348 — CVSS 7.5 (high): The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.