Wpdm – Premium Packages
Approved changes feed: RSS · Atom
cpe:2.3:a:shahjada:wpdm_–_premium_packages:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Shahjada (d33ce165-7cd5-59ed-8d3e-315923efa161) |
|---|---|
| Product | Wpdm – Premium Packages (59b8df36-f410-5118-a520-27a9c97dcb48) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-61948 |
vulnerable | 2026-07-29 01:06:18.927487 |
WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability
CRITICAL (9.3)
Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions.
Published: 2026-07-23T11:18:27.968Z
Updated: 2026-07-23T14:27:46.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61943 |
vulnerable | 2026-07-29 01:06:18.925633 |
WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability
HIGH (7.5)
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.
Published: 2026-07-23T11:18:25.373Z
Updated: 2026-07-23T14:52:34.324Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54732 |
vulnerable | 2026-06-08 07:33:13.126710 |
WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Cross Site Request Forgery.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.2.
Published: 2025-08-14T18:21:39.427Z
Updated: 2026-04-28T16:13:36.885Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30991 |
vulnerable | 2026-06-08 07:17:02.182469 |
WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Stored XSS.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.6.
Published: 2025-06-06T12:54:03.403Z
Updated: 2026-04-28T16:12:02.715Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24659 |
vulnerable | 2026-06-08 07:12:49.679075 |
WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through <= 5.9.6.
Published: 2025-01-24T17:24:44.883Z
Updated: 2026-04-28T16:11:31.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52435 |
vulnerable | 2026-06-08 06:52:15.174236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.