Easy Digital Downloads - SQLi (CVE-2023-23489)

CVE-2023-23489 is a vulnerability in the Easy Digital Downloads WordPress Plugin that allows unauthenticated attackers to perform SQL injection via specially crafted requests to a search action.

CrowdSec has been tracking this vulnerability and its exploits since 15th of December 2023.

CrowdSec network data shows that most actors exploiting CVE-2023-23489 rely on broad, untargeted scans with minimal filtering. The activity is largely automated and opportunistic in nature. Telemetry from the CrowdSec network also shows that exploitation activity for CVE-2023-23489 remains steady week-over-week. Attack volumes are consistent with long-term trends, indicating sustained interest from threat actors. CVE-2023-23489 continues to be an active part of the threat landscape and will likely remain this way for the forseeable future.

Attempts to exploit this vulnerability typically interact with search-related endpoints of the affected plugin's API.