← Database

CVE-2022-0707

MEDIUM CVSS: 4.3 Published: 2022-04-18 Modified: 2026-06-17

Description

The Easy Digital Downloads WordPress plugin before 2.11.6 does not have CSRF check in place when inserting payment notes, which could allow attackers to make a logged admin insert arbitrary notes via a CSRF attack

Affected Platforms

Awesomemotive Easy Digital Downloads

Weakness Type

CWE-352, CWE-352

References