CVE-2023-40005

CRITICAL 9.8CVE-2023-40005 · Published 13/12/2024 · updated 17/06/2026

In short

CVE-2023-40005 is a CRITICAL (CVSS 9.8) vulnerability affecting easy digital downloads (awesomemotive).
Chance of exploitation in the next 30 days (EPSS): 0.64%, higher than 50.7% of all vulnerabilities.
Fix: update to 3.2.0 or later.

Package	Affected versions	Patched versions
easy digital downloads awesomemotive	`< 3.2.0`	`3.2.0`

Description

Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through <= 3.1.5.

References

patchstack.com/database/Wordpress/Plugin/easy-digital-downloads/vulnerability/wordpress-easy-digital-downloads-plugin-3-1-5-broken-access-control · Third Party Advisory

More vulnerabilities in easy digital downloads

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

easy digital downloads

awesomemotive

< 3.2.0

3.2.0

More vulnerabilities in easy digital downloads

See all →