EDD Favorites
EDD Favorites has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for EDD Favorites has a vendor fix available, so running the current release closes it.
All of these findings were reported by DANIEL CID. EDD Favorites is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.8.30.
CVE-2015-9513Easy Digital Downloads – Favorites <= 1.0.6 - Cross-Site Scripting
Read the full analysisVulnerability Records
EDD Favorites
Author
Andrew Munro / AffiliateWP
This plugin requires both EDD Wish Lists & Easy Digital Downloads. It will NOT function without them. EDD Favorites is a plugin for EDD Wish Lists that allows your customers to “favorite” downloads. With 1 click (and another click to remove) the download is instantly added to the user’s favorites. What’s the difference between EDD Wish Lists and EDD Favorites? With EDD Wish lists, you click the “add to wish list” link and choose a list (or create a new one) from the modal window. It also works with variable pricing. EDD favorites is for quickly adding/removing downloads to a single list with 1 click. It doesn’t support variable pricing, meaning you cannot add a specific price to the favorites list, instead it adds the entire download. More plugins for Easy Digital Downloads You can find more EDD plugins (both free and commercial) on the Easy Digital Downloads’ website.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C