CVE-2026-66476 Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions

Description

Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions.

Affected products and versions

Product	Affected versions	Fixed in
Easy Digital Downloads 3.6	earliest → 3.6.9	No fix stated

Other CVEs of Easy Digital Downloads

The 4 CVEs of Easy Digital Downloads →

CVE-2026-42638 Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting… 7.5 High CVE-2026-95522 Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions 7.6 High CVE-2023-40005 Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting… 5.3 Medium