Premium Packages – Sell Digital Products Securely — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Premium Packages – Sell Digital Products Securely, with AI-generated Chinese analysis, references, and POCs.

Vendor: codename065

CVE ID	Title	CVSS	Severity	Published
CVE-2026-93654	Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter CWE-79	7.2	High	2026-09-25
CVE-2026-12800	Premium Packages <= 6.2.0 - Unauthenticated SQL Injection CWE-89	7.5	High	2026-07-28
CVE-2026-15348	Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter CWE-287	6.3	Medium	2026-07-23
CVE-2026-15906	Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter CWE-89	6.5	Medium	2026-07-23
CVE-2024-11225	Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg CWE-79	6.1	Medium	2024-11-22
CVE-2024-10164	Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode CWE-79	6.4	Medium	2024-11-21
CVE-2024-7386	Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery CWE-352	4.3	Medium	2024-09-25
CVE-2023-4293	Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation CWE-269	8.8	High	2023-08-12

All 8 known CVE vulnerabilities affecting Premium Packages – Sell Digital Products Securely with full Chinese analysis, references, and POCs where available.