Vulnerabilities / Easy Digital Downloads
Easy Digital Downloads vulnerabilities
Advisories WPSec published for Easy Digital Downloads – eCommerce Payments and Subscriptions made easy. Other sources may list more. Its attack surface: Easy Digital Downloads on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-16 | WPSEC-2026-1070 | Easy Digital Downloads <= 3.7.1.1 - Unauthenticated Discount Validation Bypass via PayPal Fastlane and Card Checkout | Medium 5.3 | 3.7.2 |
| 2026-10-16 | WPSEC-2026-1069 | Easy Digital Downloads <= 3.7.1.1 - Unauthenticated Race Condition to Discount Usage Limit Bypass via Checkout | Low 3.7 | 3.7.2 |
| 2026-10-16 | WPSEC-2026-1068 | Easy Digital Downloads <= 3.7.1.1 - Authenticated (Subscriber+) Missing Authorization to Test Email Summary Sending | Medium 4.3 | 3.7.2 |
| 2026-10-16 | WPSEC-2026-1067 | Easy Digital Downloads <= 3.7.1.1 - Unauthenticated Insecure Direct Object Reference to Order Status Modification via 'payment-id' Parameter | Medium 5.3 | 3.7.2 |
| 2026-10-07 | WPSEC-2026-0605 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.1 - Unauthenticated Order Completion Without Confirmed Payment via Square Checkout | Low 3.7 | 3.7.1.1 |
License: CC BY 4.0