References https://nvd.nist.gov/vuln/detail/CVE-2025-4670 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/easy-digital-downloads/easy-digital-downloads-sell-digital-files-subscriptions-ecommerce-store-payments-made-easy-332-authenticated-admin-stored-cross-site-scripting-via-currency-settings https://seguridadwp.es/vulnerabilidades-wp/2025/05/cve-2025-4670-easy-digital-xss-6cac93a2 https://cve.imfht.com/detail/CVE-2025-4670 https://139.196.136.194/detail?id=AVD-2025-4670 https://cve.imfht.com/detail/CVE-2025-4670?lang=en https://plugins.trac.wordpress.org/changeset/3301852/ https://wpvul.com/plugins/easy-digital-downloads/
Related VulnerabilitiesPoCibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery泛微 e-cology10 /papi/em/transform/downLoadSyslog 文件读取漏洞PoCCVE-2020-36884: BrightSign Digital Signage 8.2.26 - Server-Side Request ForgeryBrightSign Digital Signage /speedtest SSRF 漏洞PoCCVE-2024-5057: WordPress Easy Digital Downloads <= 3.2.12 - SQL InjectionPoCCVE-2023-30869: Easy Digital Downloads - Privilege Escalation亿赛通电子文档安全管理系统 /CDGServer3/logManagement/LogDownLoadService SQL 注入漏洞western-digital-mycloud-multi-uploadify-file-upload: Western Digital MyCloud Multi Uploadify File UploadPoCCVE-2010-1056: Joomla! Component com_rokdownloads - Local File InclusionPoCCVE-2010-2037: Joomla! Component Percha Downloads Attach 1.1 - Directory TraversalPoCCVE-2010-2307: Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory TraversalPoCCVE-2016-10108: Western Digital MyCloud NAS - Command Injection