Easy Digital Downloads <=3.6.9 认证任意文件上传漏洞(CVE-2026-12476)

漏洞概述 漏洞名称: Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter CVE ID: CVE-2026-12476 CVSS评分: 7.2 (High) 发布日期: July 28, 2026 最后更新日期: July 29, 2026 研究人员: Tal Kantor 影响范围 受影响软件: Easy Digital Downloads 受影响版本: <= 3.6.9 修复版本: 3.6.9.1 修复方案 修复措施: 更新到版本 3.6.9.1 或更新的已修复版本 漏洞描述 Easy Digital Downloads 插件在版本 3.6.9 及以下存在任意文件上传漏洞。该漏洞是由于 函数中文件类型验证不足，仅检查客户端提供的 Content-Type 头，而不是使用 的 核心 MIME 类型强制。这使得攻击者可以将文件上传到 目录，从而可能导致远程代码执行。 参考链接 plugins.trac.wordpress.org 其他信息 软件类型: Plugin 软件Slug: easy-digital-downloads 是否已修复: Yes 受影响版本: <= 3.6.9 修复版本: 3.6.9.1 近期漏洞 Easy Digital Downloads <= 3.6.7 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameter - CVE ID: CVE-2026-7533 - CVSS评分: 4.3 - 研究人员: typeSafe - 日期: May 27, 2026 Easy Digital Downloads - eCommerce Payments and Subscriptions made easy <= 3.6.5 - Missing Authorization - CVE ID: CVE-2026-39503 - CVSS评分: 5.3 - 研究人员: Jakub Herman - 日期: April 20, 2026 Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via 'edd_redirect' - CVE ID: CVE-2025-14783 - CVSS评分: 4.3 - 研究人员: shark3y - 日期: December 30, 2025 Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation - CVE ID: CVE-2025-11271 - CVSS评分: 5.3 - 研究人员: Jay - 日期: November 5, 2025 Easy Digital Downloads <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via 'edd_sendwp_disconnect' and 'edd_sendwp_remote_install' Functions - CVE ID: CVE-2025-8102 - CVSS评分: 5.4 - 研究人员: wesley (wcraft) - 日期: August 19, 2025 Easy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor) Stored Cross-Site Scripting via 'edd_receipt' Shortcode - CVE ID: CVE-2025-4670 - CVSS评分: 6.4 - 研究人员: Muhammad Yutha-DJ - 日期: May 28, 2025 Easy Digital Downloads - eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure - CVE ID: CVE-2025-2252 - CVSS评分: 5.3 - 研究人员: François Taffarel - 日期: March 24, 2025 Easy Digital Downloads - Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Title - CVE ID: CVE-2024-13517 - CVSS评分: 4.4 - 研究人员: Sajjad Ahmad (jack_sparrow) - 日期: January 17, 2025 Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download - CVE ID: CVE-2024-12875 - CVSS评分: 4.9 - 研究人员: Sajjad Ahmad (jack_sparrow) - 日期: December 20, 2024 Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass - CVE ID: CVE-2024-9654 - CVSS评分: 3.7 - 研究人员: Arkadiusz Hydrık - 日期: December 16, 2024 其他信息 Wordfence Intelligence 提供免费的个人和商业 API 访问 安装 Wordfence 以获取最新漏洞通知 Wordfence Intelligence WordPress 漏洞数据库完全免费访问和查询 页脚信息 Terms of Service Privacy Policy and Notice at Collection Do Not Sell or Share My Personal Information 联系方式 Email: support@wordfence.com Business Hours: 9am-8pm ET, 6am-5pm PT, 2pm-1am UTC/GMT (excluding weekends and holidays) Response Time: 24-hour support, 365 days a year, with a 1-hour response time 版权信息 Copyright 2012-2026 Defiant Inc. All Rights Reserved 其他链接 Products: Wordfence Free, Wordfence Premium, Wordfence Care, Wordfence Response, Wordfence CLI, Wordfence Intelligence, Wordfence Central Support: Documentation, Learning Center, Free Support, Premium Support News: Blog, In The News, Vulnerability Advisories About: About Wordfence, Affiliate Program, Employment, Contact, Security, CVE Request Form Stay Updated: Sign up for news and updates from our panel of experienced security professionals. 社交媒体链接 Facebook Twitter LinkedIn Email 其他信息 Wordfence Intelligence 提供免费的个人和商业 API 访问 安装 Wordfence 以获取最新漏洞通知 Wordfence Intelligence WordPress 漏洞数据库完全免费访问和查询 页脚信息 Terms of Service Privacy Policy and Notice at Collection Do Not Sell or Share My Personal Information 联系方式 Email: support@wordfence.com Business Hours: 9am-8pm ET, 6am-5pm PT, 2pm-1am UTC/GMT (excluding weekends and holidays) Response Time: 24-hour support, 365 days a year, with a 1-hour response time 版权信息 Copyright 2012-2026 Defiant Inc. All Rights Reserved 其他链接 Products: Wordfence Free, Wordfence Premium, Wordfence Care, Wordfence Response, Wordfence CLI, Wordfence Intelligence, Wordfence Central Support: Documentation, Learning Center, Free Support, Premium Support News: Blog, In The News, Vulnerability Advisories About: About Wordfence, Affiliate Program, Employment, Contact, Security, CVE Request Form Stay Updated: Sign up for news and updates from our panel of experienced security professionals. 社交媒体链接 Facebook Twitter LinkedIn Email 其他信息 Wordfence Intelligence 提供免费的个人和商业 API 访问 安装 Wordfence 以获取最新漏洞通知 Wordfence Intelligence WordPress 漏洞数据库完全免费访问和查询 页脚信息 Terms of Service Privacy Policy and Notice at Collection Do Not Sell or Share My Personal Information 联系方式 Email: support@wordfence.com Business Hours: 9am-8pm ET, 6am-5pm PT, 2pm-1am UTC/GMT (excluding weekends and holidays) Response Time: 24-hour support, 365 days a year, with a 1-hour response time 版权信息 Copyright 2012-2026 Defiant Inc.

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Easy Digital Downloads <=3.6.9 认证任意文件上传漏洞(CVE-2026-12476)

目标达成感谢每一位支持者 — 我们达成了 100% 目标！