CVE-2026-120538 | Easy Digital Downloads Plugin up to 3.7.2 on WordPress PayPal Checkout maybe_log_in_after_capture email improper authentication

A vulnerability was found in Easy Digital Downloads Plugin up to 3.7.2 on WordPress. It has been declared as critical. This issue affects the function PurchaseUser::maybe_log_in_after_capture of the component PayPal Checkout. The manipulation of the argument email results in improper authentication.

This vulnerability is known as CVE-2026-120538. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More