Premium Packages – Sell Digital Products Securely

Уязвимости

• CVE-2026-61948без авторизации≤ 6.2.0

  WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2025-24659высокие права≤ 5.9.6

  WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2026-12800без авторизации≤ 6.2.0

  Premium Packages <= 6.2.0 - Unauthenticated SQL Injection

  Высокий 7.5

• CVE-2026-61943без авторизации≤ 6.2.0

  WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2026-93654без авторизации≤ 7.2.1

  Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter

  Высокий 7.2

• CVE-2024-52435высокие права≤ 6.0.5

  WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability

  Высокий 7.2

• CVE-2026-73190без авторизации · нужен клик≤ 7.0.5

  WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2024-29924без авторизации · нужен клик≤ 5.8.2

  WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-30991нужен вход≤ 6.0.6

  WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability

  Средний 6.5

• CVE-2023-4293подписчик+≤ 5.7.4

  Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation

  Средний 6.5

• CVE-2026-15906админ≤ 7.0.4

  Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter

  Средний 6.5

• CVE-2024-10164участник+≤ 5.9.3

  Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode

  Средний 6.4

• CVE-2026-15348без авторизации≤ 7.0.4

  Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter

  Средний 6.3

• CVE-2024-11225без авторизации · нужен клик≤ 5.9.3

  Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg

  Средний 6.1

• CVE-2025-54732без авторизации · нужен клик≤ 6.0.2

  WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

  Средний 4.3

• CVE-2024-7386без авторизации · нужен клик≤ 5.9.1

  Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery

  Средний 4.3