Aller au contenu
en Se connecter
7.2 Élevée

CVE-2026-12476 The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including…

Description

The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edd_do_ajax_import_file_upload() function , which only checks the client-supplied $_FILES['edd-import-file']['type'] Content-Type header against an allow-list of CSV mime types, then uses raw move_uploaded_file() (bypassing wp_handle_upload()'s core MIME enforcement) to write the file under its original extension into the web-accessible wp-content/uploads/edd/exports/ directory. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

Produits et versions touchés

Produit Versions touchées Corrigé en
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy 3.6 premières → 3.6.9 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Easy Digital Downloads – eCommerce Payments and Subscriptions made easy

Les 17 CVE de Easy Digital Downloads – eCommerce Payments and Subscriptions made easy →
CVE-2026-120538 The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator… 8.1 Élevée CVE-2026-14335 The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored… 7.2 Élevée CVE-2026-7533 The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… 4.3 Moyenne CVE-2025-14783 The Easy Digital Downloads plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and… 4.3 Moyenne
Suivre cette CVE