Description
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files is prone to multiple security bypass vulnerabilities. Exploiting these issues may allow attackers to perform otherwise restricted actions and subsequently update prices on arbitrary items, display a list of all banned emails, change tax rates or mark arbitrary orders as paid without actually being paid. WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files version 2.1.10 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.2 or latest
References
Related Vulnerabilities
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7947)
Oracle JRE CVE-2013-5850 Vulnerability (CVE-2013-5850)
WordPress Plugin Debug Log Manager Information Disclosure (2.2.2)
WordPress Plugin WP SimpleMail Multiple Cross-Site Scripting Vulnerabilities (1.0.6)
WordPress Plugin Keyword Strategy Internal Links Multiple Cross-Site Scripting Vulnerabilities (2.0)