What’s Vulnerable › Products
codename065 Premium Packages – Sell Digital Products Securely vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.
Check whether your codename065 Premium Packages – Sell Digital Products Securely version is affected
Latest codename065 Premium Packages – Sell Digital Products Securely vulnerabilities
- CVE-2026-110664 — Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes (CVSS 6.4)
- CVE-2026-18586 — Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email' (CVSS 7.2)
- CVE-2026-103478 — Premium Packages <= 7.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkout[billing][phone]' Parameter (CVSS 6.4)
- CVE-2026-93654 — Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter (CVSS 7.2)
- CVE-2026-12800 — Premium Packages <= 6.2.0 - Unauthenticated SQL Injection (CVSS 7.5)
- CVE-2026-61948 — WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2026-61943 — WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability (CVSS 7.5)
- CVE-2026-15906 — Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter (CVSS 6.5)
- CVE-2026-15348 — Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter (CVSS 6.3)
- CVE-2025-54732 — WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
- CVE-2025-30991 — WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2025-24659 — WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability (CVSS 7.6)
- CVE-2024-11225 — Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg (CVSS 6.1)
- CVE-2024-10164 — Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode (CVSS 6.4)
- CVE-2024-52435 — WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability (CVSS 7.2)
- CVE-2024-7386 — Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery (CVSS 4.3)
- CVE-2023-4293 — Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation (CVSS 6.5)