CVE-2023-23489

Publication date

2023-01-20 00:00:00

Family

tenable

State

PUBLISHED

Description

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the s parameter of its edd_download_search action.