Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy), CVE-2025-2252

CVE, Research URL: CVE-2025-2252
Home page URL: Security reports for Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy)
Application: Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy)
Published on: Mar 25, 2025
Research Description: The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.6.1 via the edd_ajax_get_download_title() function. This makes it possible for unauthenticated attackers to extract private post titles of downloads. The impact here is minimal.
Affected versions: Min -, max 3.3.7.
Status: vulnerable

Easy Digital Downloads – Sell Digital Files &amp; Subscriptions (eCommerce Store + Payments Made Easy), CVE-2025-2252