Input validation vulnerability in Easy Digital Downloads – Simple eCommerce for Selling Digital Files 2.10.2

The Easy Digital Downloads plugin for WordPress has a security issue in versions up to 2.10.2. This means that someone, who is not authorized, can disconnect the account of a user who is signed in with certain privileges. This can happen if the attacker is able to get a site administrator to click a special link. This is because the plugin does not have the proper security measures (called nonce validation) in place on a specific function called edds_stripe_connect_process_disconnect().