CVE-2025-11271

{"id": "CVE-2025-11271", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11271", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-06T15:50:26.199391Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@wordfence.com", "affectedData": [{"vendor": "smub", "product": "Easy Digital Downloads \u2013 eCommerce Payments and Subscriptions made easy", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "3.5.2"}], "defaultStatus": "unaffected"}]}], "published": "2025-11-06T05:15:54.917", "references": [{"url": "https://github.com/awesomemotive/easy-digital-downloads/blob/main/includes/gateways/paypal/ipn.php", "source": "security@wordfence.com"}, {"url": "https://github.com/awesomemotive/easy-digital-downloads/blob/main/src/Gateways/PayPal/IPN.php", "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3382964%40easy-digital-downloads%2Ftrunk&old=3364285%40easy-digital-downloads%2Ftrunk&sfp_email=&sfph_mail=", "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4c63154e-9413-47ea-a740-441618266adf?source=cve", "source": "security@wordfence.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-807"}]}], "descriptions": [{"lang": "en", "value": "The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verification_override=1. Because this value is attacker-supplied, an unauthenticated actor can submit a forged IPN and have it treated as verified, even on production sites and with verification otherwise enabled. A valid PayPal transaction id is needed, restricting order manipulation to orders placed by the attacker. This, in turn, requires them to have a customer account."}, {"lang": "es", "value": "El plugin Easy Digital Downloads para WordPress es vulnerable a la manipulaci\u00f3n de pedidos en todas las versiones hasta la 3.5.2, inclusive, debido a una omisi\u00f3n de verificaci\u00f3n de pedidos. La verificaci\u00f3n se omite incondicionalmente cuando el cuerpo de la solicitud POST incluye verification_override=1. Dado que este valor es proporcionado por el atacante, un actor no autenticado puede enviar un IPN falsificado y hacer que se trate como verificado, incluso en sitios de producci\u00f3n y con la verificaci\u00f3n habilitada de otra manera. Se necesita un ID de transacci\u00f3n de PayPal v\u00e1lido, lo que restringe la manipulaci\u00f3n de pedidos a los pedidos realizados por el atacante. Esto, a su vez, les exige tener una cuenta de cliente."}], "lastModified": "2026-10-07T21:10:00.200", "sourceIdentifier": "security@wordfence.com"}