Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•1 views

CVE-2025-11271: Reliance on Untrusted Inputs in a Security Decision

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...

5.3CVSS5.6AI score0.00301EPSS
SaveExploits0References1
Rows per page
Query Builder