Verified

CVE-2026-105194: Easy Digital Downloads 0 to before 3.7.1

Affected technology

Easy Digital Downloads · 0 to before 3.7.1
Vendor not specified by the source

Description’s affected range: before 3.7.1 does not restrict a block's order data to the current user

Component: Not specified by the source

The source does not specify what an attacker can achieve.

Published 2026-10-08 08:49:50.105080+00:00

GitHub Advisory Database · Source record · observed 2026-10-08 08:50:52.119177+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-08 08:49:39.219831+00:00 UTC