Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.1 - Unauthenticated Discount Code Limit Bypass

The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Race Condition in all versions up to, and including, 3.7.1. This is due to a non-atomic check-then-increment pattern in discount usage tracking that allowed concurrent requests to each pass the availability check before either incremented the counter, combined with the absence of per-order claim markers to prevent double-counting. This makes it possible for unauthenticated attackers to apply a limited-use discount code more times than permitted by submitting concurrent checkout requests, bypassing the maximum-use limit. A discount code with a maximum use limit must be configured in the store.

This one needs no account at all, which puts it outside what login hardening can reach; WordSec's login security narrows the account-level paths around it, and the firewall is what inspects the request itself. None of that substitutes for the fix: Easy Digital Downloads 3.7.2 closes this, and updating the plugin is the step that ends it.

• Login Security
• Alerts