title: Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection
description: The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection.
problem types: CWE-1236 Improper Neutralization of Formula Elements in a CSV File
affected:
{
vendor: Unknown
product: Easy Digital Downloads
collectionURL: https://wordpress.org/plugins
versions:
status: affected, versionType: custom, version: 0, lessThan: 3.1.0.2
defaultStatus: unaffected
}