Medium · 6.5 CVE-2026-59524 EUVD-2026-48190GHSA-qm9v-4j55-rxh2

WordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability

Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack

Vendor: Sandhills Development Product: Easy Digital Downloads

Description

Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions.

Affected products

Vendor	Product	Affected	Fixed
Sandhills Development	Easy Digital Downloads	≤ 3.6.7	—

References

https://patchstack.com/database/wordpress/plugin/easy-digital-downloads/vulnerability/wordpress-easy-digital-downloads-plugin-3-6-7-broken-authentication-vulnerability?_s_id=cve vdb-entry