CVE-2024-9654

creationtimestamp| type| source ---|---|--- 2024-12-17 11:20:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113667894807131887 2024-12-17 14:15:58+00:00| seen| https://t.me/cvedetector/13083...

CVE-2024-9654

CVE-2024-9654 concerns Easy Digital Downloads for WordPress (versions 3.1–3.3.4). The issue is Improper Authorization in verify_guest_email, allowing unauthenticated attackers to view other users’ purchase receipts (which include a download link). Exploitation requires knowledge of another custom...