Vulnerability in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy — CVE-2026-105194

What to do now

Update Easy Digital Downloads – eCommerce Payments and Subscriptions made easy to 3.7.1 or later.

Affected versions

• Everything before 3.7.1

The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to 3.7.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive user or configuration data.

This description is reproduced verbatim from the public vulnerability record.

• https://www.wordfence.com/threat-intel/vulnerabilities/id/7fc83471-60eb-4f8c-9525-9eedbe191c0b?source=api-prod

Part of this record comes from Wordfence Intelligence. Original: https://www.wordfence.com/threat-intel/vulnerabilities/id/7fc83471-60eb-4f8c-9525-9eedbe191c0b
Copyright 2012-2026 Defiant Inc. / Full license text

This page is compiled automatically from public databases. Accuracy is not guaranteed; confirm against the vendor advisory before acting.