Access violation vulnerability in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy 3.3.4

The Easy Digital Downloads plugin for WordPress has a security vulnerability in versions 3.1 through 3.3.4. This means that attackers who are not authorized can view purchase receipts of other users. This is possible because there are not enough checks to verify that the requesting user is the one who made the purchase. To exploit this, the attacker needs to know the email address of another customer and the file ID of the purchased content.