CVE-2025-11271 | Easy Digital Downloads Plugin up to 3.5.2 on WordPress Transaction ID Remote Code Execution

November 5, 2025 Yanac

A vulnerability labeled as critical has been found in Easy Digital Downloads Plugin up to 3.5.2 on WordPress. This affects an unknown function of the component Transaction ID Handler. Executing manipulation can lead to Remote Code Execution.

This vulnerability is handled as CVE-2025-11271. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More