CVE-2026-116403: WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability

Q: What level of access does an attacker need to exploit this issue?

The supplied vector indicates that no privileges or user interaction are required, and the attack can be performed over the network. Exploitation has high attack complexity.

Q: What is the potential security impact?

The vulnerability can affect integrity, while confidentiality and availability are listed as unaffected. Its severity is medium with a CVSS score of 5.9.

Q: Which plugin versions are affected?

Easy Digital Downloads versions through 3.7.1 are affected. The provided data does not identify a fixed version.

Published Oct 26, 2026

Updated

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Leveraging Race Conditions.This issue affects Easy Digital Downloads: from n/a through 3.7.1.

Affected Software

1 affected component

Awesome Motive Easy Digital Downloads<=3.7.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/easy-digital-downloads to a version that resolves this vulnerability.
Fixed in 3.7.2

Event History

Oct 26, 2026

CVE Published

via MITRE·04:37 PM

Data Sourced

via MITRE·04:37 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The supplied vector indicates that no privileges or user interaction are required, and the attack can be performed over the network. Exploitation has high attack complexity.

What is the potential security impact?