CVE-2022-3600

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.

Score

CVSS 3.1 9.8 Critical

Status

Modified - contact@wpscan.com

Published

2022-11-21

Last modified

2025-04-30

Affected products

• Easy Digital Downloads (Awesomemotive)
• Easy Digital Downloads (Unknown)

References

• https://wpscan.com/vulnerability/16e2d970-19d0-42d1-8fb1-e7cb14ace1d0