cleantalk
Vulnerabilities and Security Researches

Easy Digital Downloads – Courses, 6ff37c2e-e21d-4abc-bafe-8ca6a2c1ed76

Published on
-
Research Description
Easy Digital Downloads &#8211; Courses [edd-courses] < 0.1.1 (closed) Freemius Library &lt; 2.2.4 - Subscriber+ Arbitrary Option Update The library, used in numerous plugins, does not have proper authorisation when updating blog options, allowing any authenticated users, such as subscriber to update arbitrary options
Affected versions
max 0.1.1.
Status
vulnerable