CVE-2025-2252: The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in all…

PriorityP428medium5.3CVSS 3.1

AVNACLPRNUINSUCLINAN

EPSS

0.36%

28.2th percentile

The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.6.1 via the edd_ajax_get_download_title() function. This makes it possible for unauthenticated attackers to extract private post titles of downloads. The impact here is minimal.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
awesomemotive	easy_digital_downloads	< 3.3.7	3.3.7
smub	easy_digital_downloads_ecommerce_payments_and_subscriptions_made_easy	<= 3.3.6.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.