https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T20:31:55.478388+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-2387 CVE-2022-2387 — Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF 2026-10-21T20:31:55.496912+00:00

Affected: Unknown Easy Digital Downloads – Simple eCommerce for Selling Digital Files

The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete arbitrary post via a CSRF attack