Live › vulnerability › CVE-2026-116403
Go to dashboardEasy Digital Downloads, a WordPress e-commerce plugin, has a race condition in how it handles a shared resource, per the NVD entry. The sources do not say what an attacker gets beyond the race, so the practical impact is unknown.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 17:31 UTC. All times on this page are UTC.
Sites running Easy Digital Downloads version 3.7.1 or earlier are in the affected range according to NVD. The sources do not say which configuration or feature triggers the race, so whether a given store is exposed is unknown.
No product ranges from the sources yet.
wp plugin get easy-digital-downloads --field=version3.7.1Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Leveraging Race Conditions.This issue affects Easy Digital Downloads: from n/a through 3.7.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-116403")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.