Premium Packages Sell Digital Products Securely
Approved changes feed: RSS · Atom
cpe:2.3:a:wpdownloadmanager:premium_packages_-_sell_digital_products_securely:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Wpdownloadmanager (a97b6973-e3ec-5672-8253-8ce3599d3534) |
|---|---|
| Product | Premium Packages Sell Digital Products Securely (ad0fc86a-c461-57bc-a5f0-a29aed722708) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7386 |
vulnerable | 2026-06-08 06:58:22.062075 |
Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery
MEDIUM (4.3)
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.9.1. This is due to missing nonce validation on the addRefund() function. This makes it possible for unauthenticated attackers to perform actions such as initiating refunds via a forged request granted they can trick a site administrator or shop manager into performing an action such as clicking on a link.
Published: 2024-09-25T02:04:58.768Z
Updated: 2026-04-08T16:34:40.890Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52435 |
vulnerable | 2026-06-08 06:52:15.175136 |
WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.5.
Published: 2024-11-18T14:36:00.957Z
Updated: 2026-04-28T16:10:42.069Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4293 |
vulnerable | 2026-06-08 06:16:11.994441 |
Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation
HIGH (8.8)
The Premium Packages - Sell Digital Products Securely plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.4 due to insufficient restriction on the 'wpdmpp_update_profile' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'profile[role]' parameter during a profile update.
Published: 2023-08-12T07:42:51.694Z
Updated: 2026-04-08T17:03:53.250Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.