Threats tagged 'ghsa-857c-39q5-mhcq'

The Easy Digital Downloads WordPress plugin contains an authentication bypass vulnerability in all versions up to and including 3.7.2. This flaw allows an unauthenticated attacker to impersonate an administrator by exploiting the guest checkout process with PayPal. The plugin trusts the email address entered during guest checkout as proof of identity, binding the order to an existing user solely based on email match. Completing a PayPal purchase flow using an administrator's email address results in an authenticated session as that administrator, enabling full account takeover.