CVE Database /
CVE-2024-43162
CVE · High
CVE-2024-43162 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.3.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-43162
|
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.3.1 |
Missing Authorization |
High
8.8
|
< 3.3.1
|
3.3.1 |
2024-08-07 |
—
|
CVE-2024-43162
The Easy Digital Downloads plugin for WordPress versions up to 3.2.12 contains a vulnerability where a function fails to verify user capabilities before execution, allowing authenticated users with Subscriber role or higher permissions to carry out actions they should not be authorized to perform. This flaw affects the plugin's access control mechanism and could lead to unauthorized modifications or data access by low-privileged users. The issue has been resolved in version 3.3.1.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings