Input validation vulnerability in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy 3.5.0

The Easy Digital Downloads plugin for WordPress has a security flaw that allows hackers to trick site administrators into deactivating or downloading and activating the SendWP plugin. This vulnerability affects all versions up to 3.5.0 and is caused by missing security checks in the plugin’s functions. This means that unauthenticated attackers can potentially gain access to a site and perform malicious actions if they can trick an administrator into clicking on a link.