Skip to content

Shahjada vulnerabilities

Products

Newest

shahjada premium packages Premium Packages < 7.3.1 - Subscriber+ Guest Order Takeover CVE-2026-118407 5.4 MediumNovember 4, 2026
shahjada premium packages Premium Packages < 7.3.1 - Unauthenticated Cross-User Saved Cart Disclosure via IDOR CVE-2026-118404 5.3 MediumNovember 4, 2026
shahjada premium packages Premium Packages < 7.3.1 - Unauthenticated Guest Order Status Disclosure CVE-2026-118403 3.7 LowNovember 4, 2026
shahjada premium packages Premium Packages < 7.2.2 - Unauthenticated Order Total Manipulation CVE-2026-118184 5.3 MediumOctober 31, 2026
codename065 download manager WordPress Download Manager plugin <= 3.3.71 - Sensitive Data Exposure vulnerability CVE-2026-94405 5.3 MediumOctober 2, 2026
shahjada premium packages Premium Packages < 7.2.1 - Unauthenticated PayPal Webhook Signature Verification Bypass CVE-2026-93511 5.3 MediumSeptember 23, 2026
shahjada wpdm – premium packages WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-73190 7.1 HighAugust 18, 2026
shahjada premium packages Premium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request CVE-2026-19711 6.5 MediumAugust 16, 2026
shahjada wpdm – premium packages WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability CVE-2026-61948 9.3 CriticalJuly 23, 2026
shahjada wpdm – premium packages WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability CVE-2026-61943 7.5 HighJuly 23, 2026
codename065 download manager WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability CVE-2026-39676 Public exploit 5.3 MediumApril 8, 2026
codename065 download manager WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability CVE-2026-39615 5.9 MediumApril 8, 2026
shahjada download manager addons for elementor WordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerability CVE-2026-24956 9.3 CriticalFebruary 20, 2026
shahjada visitor stats widget WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-68874 7.1 HighJanuary 8, 2026
codename065 download manager WordPress Download Manager plugin <= 3.3.32 - Sensitive Data Exposure vulnerability CVE-2025-63070 4.3 MediumDecember 9, 2025
codename065 download manager WordPress Download Manager Plugin <= 3.3.24 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-60093 4.3 MediumSeptember 26, 2025
codename065 download manager WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability CVE-2025-60092 5.3 MediumSeptember 26, 2025
shahjada wpdm – premium packages WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-54732 4.3 MediumAugust 14, 2025
shahjada wpdm – premium packages WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability CVE-2025-30991 6.5 MediumJune 6, 2025
shahjada live forms WordPress Live Forms plugin <= 4.8.4 - Broken Access Control vulnerability CVE-2025-39560 5.4 MediumApril 16, 2025
shahjada live forms WordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability CVE-2025-32279 4.3 MediumApril 8, 2025
shahjada live forms WordPress WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms plugin <= 4.8.4 - Settings Change vulnerability CVE-2025-30809 5.4 MediumMarch 27, 2025
shahjada wpdm – premium packages WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability CVE-2025-24659 Public exploit 7.6 HighJanuary 24, 2025
codename065 download manager WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability CVE-2024-56217 4.3 MediumDecember 31, 2024
shahjada wpdm – premium packages, wpdownloadmanager premium packages - sell digital products securely +1 more WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability CVE-2024-52435 7.6 HighNovember 18, 2024
shahjada premium packages WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-29924 7.1 HighMarch 27, 2024