7.5
High
CVE-2026-42638 Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting…
Description
Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Easy Digital Downloads 3.7 | earliest → 3.7.1 | No fix stated |
| Easy Digital Downloads 3.7 | earliest → 3.7.1 | No fix stated |
Other CVEs of Easy Digital Downloads
The 4 CVEs of Easy Digital Downloads →
CVE-2026-95522
Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions
7.6
High
CVE-2026-66476
Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions
4.9
Medium
CVE-2023-40005
Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting…
5.3
Medium