Skip to content
Threat Feed
Subscribe

Product

Easy Digital Downloads (<= 3.6.9)

1 brief RSS
high advisory

Stored Cross-Site Scripting Vulnerability in Easy Digital Downloads Plugin

An unauthenticated stored XSS vulnerability in the Easy Digital Downloads WordPress plugin allows attackers to inject malicious scripts via PayPal IPN parameters.

Easy Digital Downloads wordpress xss web-application cve-2026-14335
1t 1c