Premium Packages – Sell Digital Products Securely

Güvenlik açıkları

• CVE-2026-61948kimlik doğrulamasız≤ 6.2.0

  WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2025-24659yüksek yetki≤ 5.9.6

  WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2026-12800kimlik doğrulamasız≤ 6.2.0

  Premium Packages <= 6.2.0 - Unauthenticated SQL Injection

  Yüksek 7.5

• CVE-2026-61943kimlik doğrulamasız≤ 6.2.0

  WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2026-93654kimlik doğrulamasız≤ 7.2.1

  Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter

  Yüksek 7.2

• CVE-2024-52435yüksek yetki≤ 6.0.5

  WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability

  Yüksek 7.2

• CVE-2026-73190kimlik doğrulamasız · tıklama gerekir≤ 7.0.5

  WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-29924kimlik doğrulamasız · tıklama gerekir≤ 5.8.2

  WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-30991giriş gerekir≤ 6.0.6

  WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2023-4293abone+≤ 5.7.4

  Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation

  Orta 6.5

• CVE-2026-15906yönetici≤ 7.0.4

  Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter

  Orta 6.5

• CVE-2024-10164katılımcı+≤ 5.9.3

  Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode

  Orta 6.4

• CVE-2026-15348kimlik doğrulamasız≤ 7.0.4

  Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter

  Orta 6.3

• CVE-2024-11225kimlik doğrulamasız · tıklama gerekir≤ 5.9.3

  Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg

  Orta 6.1

• CVE-2025-54732kimlik doğrulamasız · tıklama gerekir≤ 6.0.2

  WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

  Orta 4.3

• CVE-2024-7386kimlik doğrulamasız · tıklama gerekir≤ 5.9.1

  Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery

  Orta 4.3