CVE-2026-120538 - Easy Digital Downloads <= 3.7.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Guest Checkout Email Binding at PayPal Capture
CVE ID :CVE-2026-120538 Published : Nov. 3, 2026, 5:18 a.m. | 1 hour, 45 minutes ago Description :The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator account takeover in all versions up to, and including, 3.7.2. During a PayPal guest...