High · 7.6 CVE-2026-95522 EUVD-2026-85491GHSA-m24x-544x-prhx

WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack

Vendor: Syed Balkhi Product: Easy Digital Downloads

Description

Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Syed Balkhi	Easy Digital Downloads	≤ 3.7.0	—

References

https://patchstack.com/database/wordpress/plugin/easy-digital-downloads/vulnerability/wordpress-easy-digital-downloads-plugin-3-7-0-sql-injection-vulnerability?_s_id=cve vdb-entry