PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-39503 Awesomemotive CVE debrief

CVE-2026-39503 is a HIGH severity vulnerability (CVSS Score: 7.5) in Easy Digital Downloads plugin versions <= 3.6.5. The vulnerability is caused by unauthenticated broken access control. The CVE was published on 2026-06-15T21:16:45.487Z and last modified on 2026-06-15T21:24:32.790Z.

Vendor
Awesomemotive
Product
Easy Digital Downloads
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-15
Original CVE updated
2026-06-15
Advisory published
2026-06-15
Advisory updated
2026-06-15

Who should care

Users of Easy Digital Downloads plugin versions <= 3.6.5 should apply the necessary patches to prevent exploitation.

Technical summary

The vulnerability has a CVSS vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N and is classified under CWE-862.

Defensive priority

HIGH

Recommended defensive actions

  • Apply the patch or upgrade to a version of Easy Digital Downloads greater than 3.6.5.
  • Review and restrict access to sensitive areas of the plugin.

Evidence notes

The vulnerability was reported by [email protected] and has a reference on Patchstack.

Official resources

CVE-2026-39503 was published on 2026-06-15T21:16:45.487Z and last modified on 2026-06-15T21:24:32.790Z.