Security Advisory

CVE-2022-0707

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-18 17:10:31

Last updated 2024-08-02 23:40:03

Assigner WPScan

State PUBLISHED

Description

The Easy Digital Downloads WordPress plugin before 2.11.6 does not have CSRF check in place when inserting payment notes, which could allow attackers to make a logged admin insert arbitrary notes via a CSRF attack

← Browse all CVEs View on cve.org ↗