CVE-2026-95522

Easy Digital Downloads versions up to 3.7.0 are vulnerable to SQL injection in the shop manager functionality, allowing attackers to manipulate database queries. This could lead to unauthorized data access or modification, posing a significant risk to the integrity and confidentiality of sensitive information. E-commerce operators using affected versions should prioritize patching to mitigate potential exploitation.