CVE

CVE-2025-4670 — Easy Digital Downloads < 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-4670 Easy Digital Downloads < 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode Unknown < 3.3.9 3.3.9

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.