Vulnerabilities / Easy Digital Downloads / WPSEC-2026-1069
Easy Digital Downloads <= 3.7.1.1 - Unauthenticated Race Condition to Discount Usage Limit Bypass via Checkout
Low 3.7
CWE-362Fixed in 3.7.2
- ID
- WPSEC-2026-1069
- Plugin
- Easy Digital Downloads – eCommerce Payments and Subscriptions made easy (easy-digital-downloads)
- Affected
- all versions before 3.7.2
- Remediation
- Update to 3.7.2 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weakness
- CWE-362
- Usage
- Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-10-16
- Attack surface
- Easy Digital Downloads on WPSec AttackSurface
- Fix released
- Published
Description
The Easy Digital Downloads plugin for WordPress is vulnerable to a race condition via the checkout process in all versions up to, and including, 3.7.1.1, due to discount codes being checked when checkout is submitted but their uses counted only once an order completes, with no use reserved for pending orders and no atomic status check when a PayPal order is captured. This makes it possible for unauthenticated attackers to run several checkouts at the same time and redeem a discount code more times than its maximum-use or single-use limit allows.
References
- https://wpsec.com/vuln/WPSEC-2026-1069/
- https://plugins.svn.wordpress.org/easy-digital-downloads/tags/3.7.2/
- https://wordpress.org/plugins/easy-digital-downloads/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS