Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

WPDM – Premium Packages — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in WPDM – Premium Packages, with AI-generated Chinese analysis, references, and POCs.

Vendor: Shahjada

CVE IDTitleCVSSSeverityPublished
CVE-2026-73190 WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-08-18
CVE-2026-61948 WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability CWE-89 9.3 Critical2026-07-23
CVE-2026-61943 WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability CWE-862 7.5 High2026-07-23
CVE-2025-54732 WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 4.3 Medium2025-08-14
CVE-2025-30991 WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium2025-06-06
CVE-2025-24659 WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability CWE-89 7.6 High2025-01-24
CVE-2024-52435 WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability CWE-89 7.6 High2024-11-18

All 7 known CVE vulnerabilities affecting WPDM – Premium Packages with full Chinese analysis, references, and POCs where available.