Known vulnerabilities in the Wpdm Premium Packages plugin
6 security advisories have been published for the Wpdm Premium Packages plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- WPDM - Premium Packages - Cross-Site Scripting (XSS) (CVE-2026-73190) HIGH
- Wpdm Premium Packages - SQL Injection (CVE-2026-12800) HIGH
- WPDM - Premium Packages - SQL Injection (CVE-2026-61948) CRITICAL
- WPDM - Premium Packages - Broken Access Control (CVE-2026-61943) HIGH
- Wpdm Premium Packages - SQL Injection (CVE-2026-15906) MEDIUM
- Wpdm Premium Packages - Authentication Bypass (CVE-2026-15348) MEDIUM
- Wpdm Premium Packages - Cross-Site Scripting (XSS) (CVE-2024-11225) MEDIUM
- Wpdm Premium Packages - Cross-Site Scripting (XSS) (CVE-2024-10164) MEDIUM
- Wpdm Premium Packages - Privilege Escalation (CVE-2023-4293) HIGH