CVE-2026-95522 Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions

Description

Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
Easy Digital Downloads 3.7	earliest → 3.7.0	No fix stated

Other CVEs of Easy Digital Downloads

The 4 CVEs of Easy Digital Downloads →

CVE-2026-42638 Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting… 7.5 High CVE-2026-66476 Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions 4.9 Medium CVE-2023-40005 Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting… 5.3 Medium