WPDM – Premium Packages
Shahjada
Developer
7.3.2
Latest version
2,000
Installations
No date
Last updated
Vulnerability history
0 present
21 patched
10 Mitigation rules
- Unauthenticated Order Total Manipulation vulnerability< 7.2.21 day ago
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 7.2.815/10/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 7.2.609/10/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 7.2.125/09/2026
- Unauthenticated PayPal Webhook Signature Verification Bypass vulnerability7.0.0-7.2.024/09/2026
- WordPress Premium Packages - Sell Digital Products Securely plugin < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request vulnerability< 7.0.720/08/2026
- Cross Site Scripting (XSS) vulnerability<= 7.0.518/08/2026
- Unauthenticated SQL Injection vulnerability<= 6.2.031/07/2026
- Authentication Bypass to Non-Admin vulnerability<= 7.0.430/07/2026
- Authenticated (Admin+) SQL Injection vulnerability<= 7.0.422/07/2026
- SQL Injection vulnerability<= 6.2.016/07/2026
- Broken Access Control vulnerability<= 6.2.016/07/2026
- Cross Site Request Forgery (CSRF) Vulnerability<= 6.0.214/08/2025
- Cross Site Scripting (XSS) Vulnerability<= 6.0.605/06/2025
- SQL Injection vulnerability<= 5.9.624/01/2025
- Reflected Cross-Site Scripting via add_query_arg vulnerability<= 5.9.321/11/2024
- WordPress Premium Packages - Sell Digital Products Securely plugin <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode vulnerability<= 5.9.320/11/2024
- SQL Injection vulnerability<= 6.0.515/11/2024
- Cross-Site Request Forgery vulnerability<= 5.9.124/09/2024
- Cross Site Scripting (XSS) vulnerability<= 5.8.225/03/2024
- Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation vulnerability<= 5.7.414/08/2023