CVE Database /
CVE-2024-31293
CVE · High
CVE-2024-31293 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.2.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-31293
|
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.2.7 |
Cross-Site Request Forgery (CSRF) |
High
8.8
|
< 3.2.7
|
3.2.7 |
2024-04-05 |
—
|
CVE-2024-31293
The Easy Digital Downloads plugin for WordPress contains a cross-site request forgery vulnerability in versions before 3.2.7 that could allow an attacker to trick authenticated users with higher privileges into performing unintended actions on the site. The flaw was discovered by Dhabaleshwar Das and impacts all installations running the affected versions. Users should upgrade to version 3.2.7 or later to eliminate this security risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings