CVE-2026-14335Published
Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parameters
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-14335 · Microsoft / collected KEV context
cve-program · CVE-2026-14335
- https://www.wordfence.com/threat-intel/vulnerabilities/id/eea7ddc4-b3fb-4bad-9acc-9d913ecb8e1b?source=cve
- https://plugins.trac.wordpress.org/changeset/3625073/easy-digital-downloads/trunk/includes/admin/reporting/class-gateway-error-logs-list-table.php?old=3226442&old_path=easy-digital-downloads%2Ftrunk%2Fincludes%2Fadmin%2Freporting%2Fclass-gateway-error-logs-list-table.php
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.