What’s Vulnerable › Products

ichurakov Paid Downloads vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your ichurakov Paid Downloads version is affected

Latest ichurakov Paid Downloads vulnerabilities

• CVE-2026-87935 — Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action (CVSS 8.1)
• CVE-2025-68857 — WordPress Paid Downloads plugin <= 3.15 - SQL Injection vulnerability (CVSS 9.3)