Easy Digital Downloads Ecommerce Payments And Subscriptions Made Easy
Monthly
Stored cross-site scripting in the Easy Digital Downloads WordPress plugin (all versions up to and including 3.6.9) allows unauthenticated attackers to inject arbitrary scripts through PayPal IPN parameters, which are stored without sanitization and later rendered unescaped in the wp-admin 'Gateway Error Logs' reporting table. Although the injection is remote and unauthenticated (CVSS:3.1/AV:N/AC:L/PR:N/UI:N, with scope change because the script executes in the privileged wp-admin origin), the payload only runs when a logged-in user - in practice a store administrator - opens the gateway error logs page, and only stores with the PayPal gateway enabled are exposed. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV); this is a moderate-priority issue driven mainly by the admin-view precondition.
Arbitrary file upload vulnerability in the Easy Digital Downloads WordPress plugin (≤3.6.9) allows authenticated attackers with Shop Manager-level access to upload malicious files via insufficient validation in the import file upload function, potentially achieving remote code execution. No public exploit or active exploitation reported at time of analysis. The fix was applied in the plugin trunk.
Stored cross-site scripting in the Easy Digital Downloads WordPress plugin (all versions up to and including 3.6.9) allows unauthenticated attackers to inject arbitrary scripts through PayPal IPN parameters, which are stored without sanitization and later rendered unescaped in the wp-admin 'Gateway Error Logs' reporting table. Although the injection is remote and unauthenticated (CVSS:3.1/AV:N/AC:L/PR:N/UI:N, with scope change because the script executes in the privileged wp-admin origin), the payload only runs when a logged-in user - in practice a store administrator - opens the gateway error logs page, and only stores with the PayPal gateway enabled are exposed. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV); this is a moderate-priority issue driven mainly by the admin-view precondition.
Arbitrary file upload vulnerability in the Easy Digital Downloads WordPress plugin (≤3.6.9) allows authenticated attackers with Shop Manager-level access to upload malicious files via insufficient validation in the import file upload function, potentially achieving remote code execution. No public exploit or active exploitation reported at time of analysis. The fix was applied in the plugin trunk.