CVE-2026-7533
MEDIUM
4,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: low
Availability: none
Description
AI Translation Available
The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7. This is due to missing nonce verification in the `handle_oauth_redirect()` function, which is registered on the `admin_init` hook and processes Square OAuth tokens from a user-supplied GET parameter without any CSRF token validation. This makes it possible for unauthenticated attackers to overwrite the store's Square payment gateway credentials by tricking a logged-in administrator into clicking a crafted link, potentially resulting in payment account hijacking.
352
Cross-Site Request Forgery (CSRF)
StableCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Availability
Non-Repudiation
Access Control
Potential Impacts:
Gain Privileges Or Assume Identity
Bypass Protection Mechanism
Read Application Data
Modify Application Data
Dos: Crash, Exit, Or Restart
Applicable Platforms
Technologies:
Web Based, Web Server
https://plugins.trac.wordpress.org/browser/easy-digital-downloads/tags/3.6.5/sr…
https://plugins.trac.wordpress.org/browser/easy-digital-downloads/tags/3.6.5/sr…
https://plugins.trac.wordpress.org/browser/easy-digital-downloads/tags/3.6.5/sr…
https://plugins.trac.wordpress.org/browser/easy-digital-downloads/trunk/src/Gat…
https://plugins.trac.wordpress.org/browser/easy-digital-downloads/trunk/src/Gat…
https://plugins.trac.wordpress.org/browser/easy-digital-downloads/trunk/src/Gat…
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&ne…
https://www.wordfence.com/threat-intel/vulnerabilities/id/e375f761-459c-4cad-82…