CVE-2022-3600: Awesomemotive Easy Digital Downloads

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.

Affected products

• Awesomemotive Easy Digital Downloads: before 3.1.0.2 (fixed in 3.1.0.2)

Published 2022-11-21. Last modified 2026-06-17.