CVE-2024-35629: Wow-Company Easy Digital Downloads

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Wow-Company Easy Digital Downloads – Recent Purchases allows PHP Remote File Inclusion.This issue affects Easy Digital Downloads – Recent Purchases: from n/a through 1.0.2.

Affected products

• Wow-Company Easy Digital Downloads: up to and including 1.0.2

Published 2024-06-04. Last modified 2026-06-17.