Title: Security Issue: Is there a patch available?
Last modified: October 6, 2026

---

# Security Issue: Is there a patch available?

 *  Resolved [Robert Lilly](https://wordpress.org/support/users/rclilly/)
 * (@rclilly)
 * [6 days, 1 hour ago](https://wordpress.org/support/topic/security-issue-is-there-a-patch-available/)
 * Patchstack ([https://patchstack.com/database/wordpress/plugin/easy-digital-downloads/vulnerability/wordpress-easy-digital-downloads-plugin-3-7-1-broken-access-control-vulnerability](https://patchstack.com/database/wordpress/plugin/easy-digital-downloads/vulnerability/wordpress-easy-digital-downloads-plugin-3-7-1-broken-access-control-vulnerability))
   is reporting: WordPress Easy Digital Downloads Plugin <= 3.7.1 is vulnerable 
   to a high priority Broken Access Control. I’ve implemented a security rule on
   Cloudflare for my affected site but having the plugin fixed would be great.
    -  This topic was modified 6 days, 1 hour ago by [Robert Lilly](https://wordpress.org/support/users/rclilly/).
      Reason: fixed typo

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Author [Chris Klosowski](https://wordpress.org/support/users/cklosows/)
 * (@cklosows)
 * [6 days, 1 hour ago](https://wordpress.org/support/topic/security-issue-is-there-a-patch-available/#post-19038217)
 * Hi there [@rclilly](https://wordpress.org/support/users/rclilly/),
 * Thanks for flagging this, and for taking steps to protect your site in the meantime.
   A firewall rule is a sensible precaution until the update is out.
 * We’re aware of the vulnerability and are treating it as a top priority. A security
   update fixing it is being released today.
 * Patchstack published this without first reporting it to us through responsible
   disclosure, so we didn’t have the chance to ship a fix before it became public.
   When issues are reported to us directly, we turn fixes around quickly, and we’re
   moving just as fast here.
 * We’ll update this thread as soon as the release is available. Once it is, please
   update right away. You can keep your Cloudflare rule in place too, if you’d like
   the extra layer.
 * Thanks for your patience.
 *  Plugin Author [Chris Klosowski](https://wordpress.org/support/users/cklosows/)
 * (@cklosows)
 * [5 days, 23 hours ago](https://wordpress.org/support/topic/security-issue-is-there-a-patch-available/#post-19038267)
 * Thanks for your patience [@rclilly](https://wordpress.org/support/users/rclilly/)
 * We’ve released version 3.7.1.1 of Easy Digital Downloads and worked with the 
   Plugins team to ensure that it is available for updates.
 *  Thread Starter [Robert Lilly](https://wordpress.org/support/users/rclilly/)
 * (@rclilly)
 * [5 days, 21 hours ago](https://wordpress.org/support/topic/security-issue-is-there-a-patch-available/#post-19038280)
 * Hi Chris, thanks for the quick reply and the quick patch! That’s a bummer that
   Patchstack released this publicly before contacting you folks. That explains 
   why I didn’t see an update available earlier.
 *  [Daan van den Bergh](https://wordpress.org/support/users/daanvandenbergh/)
 * (@daanvandenbergh)
 * [1 day ago](https://wordpress.org/support/topic/security-issue-is-there-a-patch-available/#post-19042234)
 * Why wasn’t it mentioned in the changelog that 3.7.1.1 contained a vulnerability
   patch?
 * Coincidentally I came across this post, and I had held off on installing 3.7.1.1
   because I didn’t get around to testing it yet. The changelog entry didn’t seem
   very impactful either.

Viewing 4 replies - 1 through 4 (of 4 total)

You must be [logged in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fsecurity-issue-is-there-a-patch-available%2F%3Foutput_format%3Dmd&locale=en_US)
to reply to this topic.

 * ![](https://ps.w.org/easy-digital-downloads/assets/icon.svg?rev=3455837)
 * [Easy Digital Downloads – eCommerce Payments and Subscriptions made easy](https://wordpress.org/plugins/easy-digital-downloads/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/easy-digital-downloads/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/easy-digital-downloads/)
 * [Active Topics](https://wordpress.org/support/plugin/easy-digital-downloads/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/easy-digital-downloads/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/easy-digital-downloads/reviews/)

 * 4 replies
 * 3 participants
 * Last reply from: [Daan van den Bergh](https://wordpress.org/support/users/daanvandenbergh/)
 * Last activity: [1 day ago](https://wordpress.org/support/topic/security-issue-is-there-a-patch-available/#post-19042234)
 * Status: resolved