Lucene search
Muhamad HidayatPATCHSTACK:F29ED414426FA9D44E60CD6EC9901121HistoryMar 28, 2022 - 12:00 a.m.
WordPress Easy Digital Downloads plugin <= 2.11.5 - Arbitrary Payment Note Insertion via Cross-Site Request Forgery (CSRF) vulnerability
2022-03-2800:00:00
Muhamad Hidayat
patchstack.com
17
0.001 Low
EPSS
Percentile
30.0%
Arbitrary Payment Note Insertion via Cross-Site Request Forgery (CSRF) vulnerability was discovered by Muhamad Hidayat in WordPress Easy Digital Downloads plugin (versions <= 2.11.5).
Solution
Update the WordPress Easy Digital Downloads plugin to the latest available version (at least 2.11.6)
| CPE | Name | Operator | Version |
|---|---|---|---|
| easy digital downloads | le | 2.11.5 |
Related
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2022-04-18 18:15:00
nvd
nvd
CVE-2022-0707
2022-04-18 18:15:08
wpvulndb
wpvulndb
Easy Digital Downloads < 2.11.6 - Arbitrary Payment Note Insertion via CSRF
2022-03-28 00:00:00
wpexploit
wpexploit
Easy Digital Downloads < 2.11.6 - Arbitrary Payment Note Insertion via CSRF
2022-03-28 00:00:00
cve
cve
CVE-2022-0707
2022-04-18 18:15:08