medium4.3
CVE-2022-0707
The Easy Digital Downloads WordPress plugin before 2.11.6 does not have CSRF check in place when inserting payment notes, which could allow attackers to make a…
Impact
The Easy Digital Downloads WordPress plugin before 2.11.6 does not have CSRF check in place when inserting payment notes, which could allow attackers to make a logged admin insert arbitrary notes via a CSRF attack
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Awesomemotive | Easy Digital Downloads | before 2.11.6 |