Skip to contentShahjada Premium Packages vulnerabilities
- shahjada premium packagesPremium Packages < 7.3.1 - Subscriber+ Guest Order TakeoverCVE-2026-1184075.4 Medium
- shahjada premium packagesPremium Packages < 7.3.1 - Unauthenticated Cross-User Saved Cart Disclosure via IDORCVE-2026-1184045.3 Medium
- shahjada premium packagesPremium Packages < 7.3.1 - Unauthenticated Guest Order Status DisclosureCVE-2026-1184033.7 Low
- shahjada premium packagesPremium Packages < 7.2.2 - Unauthenticated Order Total ManipulationCVE-2026-1181845.3 Medium
- shahjada premium packagesPremium Packages < 7.2.1 - Unauthenticated PayPal Webhook Signature Verification BypassCVE-2026-935115.3 Medium
- shahjada wpdm – premium packagesWordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-731907.1 High
- shahjada premium packagesPremium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal RequestCVE-2026-197116.5 Medium
- shahjada wpdm – premium packagesWordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerabilityCVE-2026-619489.3 Critical
- shahjada wpdm – premium packagesWordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerabilityCVE-2026-619437.5 High
- shahjada wpdm – premium packagesWordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-547324.3 Medium
- shahjada wpdm – premium packagesWordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-309916.5 Medium
- shahjada wpdm – premium packagesWordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerabilityCVE-2025-24659Public exploit7.6 High
- shahjada wpdm – premium packages, wpdownloadmanager premium packages - sell digital products securely +1 moreWordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerabilityCVE-2024-524357.6 High
- shahjada premium packagesWordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-299247.1 High