CVE-2025-14783 | Easy Digital Downloads Plugin up to 3.6.2 on WordPress Password Reset edd_redirect password recovery

December 30, 2025 Yanac

A vulnerability described as problematic has been identified in Easy Digital Downloads Plugin up to 3.6.2 on WordPress. This vulnerability affects unknown code of the component Password Reset Handler. The manipulation of the argument edd_redirect results in weak password recovery.

This vulnerability was named CVE-2025-14783. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More