Critical · 9.8 CVE-2022-3600 EUVD-2022-42964GHSA-w3w2-8hq7-8fmw

Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection

Published Nov 21, 2022 · Updated Apr 30, 2025 · Assigned by WPScan

Description

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.

Vendor	Product	Affected	Fixed
—	Easy Digital Downloads	< 3.1.0.2	3.1.0.2