WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control

CVE-2023-40005

What is CVE-2023-40005?

A missing authorization vulnerability exists in the Easy Digital Downloads plugin, enabling exploitation due to incorrectly configured access control security levels. This flaw allows unauthorized users to gain access to restricted features and sensitive data. The issue impacts versions of the Easy Digital Downloads plugin ranging from unaudited releases up to version 3.1.5. Website operators using affected versions are advised to apply security measures and updates to mitigate potential risks.

References