CVE-2025-14783

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14783", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-12-16T13:32:13.229Z", "datePublished": "2025-12-31T06:24:42.546Z", "dateUpdated": "2026-04-08T16:47:21.110Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:47:21.110Z"}, "affected": [{"vendor": "smub", "product": "Easy Digital Downloads \u2013 eCommerce Payments and Subscriptions made easy", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.6.2", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Easy Digital Downloads plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and including, 3.6.2. This is due to insufficient validation on the redirect url supplied via the 'edd_redirect' parameter. This makes it possible for unauthenticated attackers to redirect users with the password reset email to potentially malicious sites if they can successfully trick them into performing an action."}], "title": "Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3c0fb43c-f576-412e-a144-4725356ed9a0?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/easy-digital-downloads/trunk/includes/users/lost-password.php#L187"}, {"url": "https://plugins.trac.wordpress.org/browser/easy-digital-downloads/trunk/includes/blocks/views/forms/lost-password.php#L24"}, {"url": "https://plugins.trac.wordpress.org/changeset/3426524/easy-digital-downloads/trunk/includes/users/lost-password.php"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-640 Weak Password Recovery Mechanism for Forgotten Password", "cweId": "CWE-640", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Angus Girvan"}], "timeline": [{"time": "2025-12-16T13:48:22.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-12-30T17:50:22.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-31T16:25:43.153630Z", "id": "CVE-2025-14783", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-31T16:25:51.162Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-14783", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-31T16:25:43.153630Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-31T16:25:48.046Z"}}], "cna": {"title": "Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect", "credits": [{"lang": "en", "type": "finder", "value": "Angus Girvan"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "smub", "product": "Easy Digital Downloads \u2013 eCommerce Payments and Subscriptions made easy", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "3.6.2"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-12-16T13:48:22.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-12-30T17:50:22.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3c0fb43c-f576-412e-a144-4725356ed9a0?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/easy-digital-downloads/trunk/includes/users/lost-password.php#L187"}, {"url": "https://plugins.trac.wordpress.org/browser/easy-digital-downloads/trunk/includes/blocks/views/forms/lost-password.php#L24"}, {"url": "https://plugins.trac.wordpress.org/changeset/3426524/easy-digital-downloads/trunk/includes/users/lost-password.php"}], "descriptions": [{"lang": "en", "value": "The Easy Digital Downloads plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and including, 3.6.2. This is due to insufficient validation on the redirect url supplied via the 'edd_redirect' parameter. This makes it possible for unauthenticated attackers to redirect users with the password reset email to potentially malicious sites if they can successfully trick them into performing an action."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-640", "description": "CWE-640 Weak Password Recovery Mechanism for Forgotten Password"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:47:21.110Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14783", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:47:21.110Z", "dateReserved": "2025-12-16T13:32:13.229Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-12-31T06:24:42.546Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Easy Digital Downloads \u2013 eCommerce Payments and Subscriptions made easy", "vendor": "smub", "versions": [{"lessThanOrEqual": "3.6.2", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Easy Digital Downloads plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and including, 3.6.2. This is due to insufficient validation on the redirect url supplied via the 'edd_redirect' parameter. This makes it possible for unauthenticated attackers to redirect users with the password reset email to potentially malicious sites if they can successfully trick them into performing an action."}, {"lang": "es", "value": "El plugin Easy Digital Downloads para WordPress es vulnerable a Redirecci\u00f3n No Validada en todas las versiones hasta la 3.6.2, inclusive. Esto se debe a una validaci\u00f3n insuficiente en la URL de redirecci\u00f3n suministrada a trav\u00e9s del par\u00e1metro 'edd_redirect'. Esto hace posible que atacantes no autenticados redirijan a los usuarios con el correo electr\u00f3nico de restablecimiento de contrase\u00f1a a sitios potencialmente maliciosos si logran enga\u00f1arlos para que realicen una acci\u00f3n."}], "id": "CVE-2025-14783", "lastModified": "2026-06-17T08:36:33.310", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14783", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-31T16:25:43.153630Z", "version": "2.0.3"}}]}, "published": "2025-12-31T07:15:49.197", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/easy-digital-downloads/trunk/includes/blocks/views/forms/lost-password.php#L24"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/easy-digital-downloads/trunk/includes/users/lost-password.php#L187"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3426524/easy-digital-downloads/trunk/includes/users/lost-password.php"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3c0fb43c-f576-412e-a144-4725356ed9a0?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-640"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T16:53:44.682859+00:00", "value": {"mitigation_remediation": ["Update the Easy Digital Downloads plugin to version 3.6.3 or later, which removes the unvalidated redirect handling.", "If an update cannot be applied immediately, restrict the edd_redirect parameter to trusted URLs or disable the redirect feature for password reset emails so that no external redirect can occur.", "Audit the authentication and password recovery pages of the site to ensure that no other redirect parameters are accepted without strict validation, following best practices for preventing CWE\u2011640 style vulnerabilities."], "summary": {"action": "Immediate Patch", "impact": "Phishing via user redirection"}, "threat_synthesis": {"affected_systems": "All installations of the Easy Digital Downloads plugin for WordPress up to and including version 3.6.2 are affected. The vulnerability is tied to the password\u2011reset functionality whereby a redirect URL is supplied via the edd_redirect parameter.", "description_and_impact": "The Easy Digital Downloads WordPress plugin contains an unvalidated redirect flaw in the password\u2011reset workflow. An unauthenticated attacker can supply a malicious URL with the edd_redirect parameter, causing the password\u2011reset email to link to a site of the attacker\u2019s choosing. This redirect can be used to trick users into visiting phishing pages that harvest credentials or install malware. The vulnerability does not provide direct code execution but enables social engineering attacks that compromise user confidentiality and could undermine the integrity of the site\u2019s authentication process.", "risk_and_exploitability": "The CVSS score of 4.3 reflects a medium impact but low exploitation potential; the EPSS score of less than 1% indicates that exploitation is unlikely at this time. The flaw is not currently listed in the CISA KEV catalogue, suggesting limited known exploitation. Nevertheless an attacker could exploit this by persuading a user to click a password\u2011reset link that is redirected to a malicious site, making the threat realistic for any website that relies on the plugin and uses the default password\u2011reset flow."}}}}, "created": "2026-01-05T10:17:50.692315+00:00", "updated": "2026-04-21T17:00:12.322349+00:00", "vendors": ["smub", "smub$PRODUCT$easy_digital_downloads", "wordpress", "wordpress$PRODUCT$wordpress"]}