PT-2025-21369 · WordPress · Easy Digital Downloads Google Sheet Connector+1

Erwan Lr · Published 2025-05-15 · Updated 2025-06-11 · CVE-2023-2334

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: edd-google-sheet-connector-pro WordPress plugin versions prior to 1.4 Easy Digital Downloads Google Sheet Connector WordPress plugin versions prior to 1.6.6

Description: The issue concerns a lack of CSRF check when updating the Access Code, which could allow attackers to make a logged-in admin change the access code to an arbitrary one via a CSRF attack.

Recommendations: For edd-google-sheet-connector-pro WordPress plugin versions prior to 1.4, update to version 1.4 or later. For Easy Digital Downloads Google Sheet Connector WordPress plugin versions prior to 1.6.6, update to version 1.6.6 or later.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-2334

Affected Products

Easy Digital Downloads Google Sheet Connector

Edd-Google-Sheet-Connector-Pro

References · 5

• 🔥 https://wpscan.com/vulnerability/95562684-2bb1-46f0-838c-8501db6b43ed · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-2334 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2334 · Vendor Advisory
• https://twitter.com/CVEnew/status/1923119268058759381 · Twitter Post
• https://t.me/cvenotify/125434 · Telegram Post