Medium · 4.3 CVE-2024-31293 EUVD-2024-29189GHSA-9r64-chx7-hchc

WordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.6.

Vendor	Product	Affected	Fixed
Easy Digital Downloads	Easy Digital Downloads	≤ 3.2.6	—