CVE-2026-95522: Syed Balkhi Easy Digital Downloads

High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.

Affected products

• Syed Balkhi Easy Digital Downloads: up to and including 3.7.0

Published 2026-09-23. Last modified 2026-09-23.