Plugin icon

Premium Packages – Sell Digital Products Securely

wpdm-premium-packages

Vulnerabilities:

15

Last Updated:

August 13, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-08-14
Title
Premium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request
Fixed in
Fixed in 7.0.7
CVSS
4.3 (medium)
Published
2026-07-27
Title
Premium Packages < 7.0.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 7.0.0
CVSS
7.5 (high)
Published
2026-07-22
Title
Premium Packages < 7.0.5 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter
Fixed in
Fixed in 7.0.5
CVSS
6.3 (medium)
Published
2026-07-22
Title
Premium Packages < 7.0.5 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter
Fixed in
Fixed in 7.0.5
CVSS
4.9 (medium)
Published
2026-07-16
Title
Premium Packages – Sell Digital Products Securely < 7.0.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 7.0.0
CVSS
7.5 (high)
Published
2026-07-16
Title
Premium Packages – Sell Digital Products Securely < 7.0.0 - Missing Authorization
Fixed in
Fixed in 7.0.0
CVSS
5.3 (medium)
Published
2025-08-14
Title
WPDM – Premium Packages < 6.0.3 - Cross-Site Request Forgery
Fixed in
Fixed in 6.0.3
CVSS
4.3 (medium)
Published
2025-06-05
Title
Premium Packages < 6.0.7 - Contributor+ Stored XSS
Fixed in
Fixed in 6.0.7
CVSS
5.9 (medium)
Published
2025-01-24
Title
Premium Packages < 5.9.7 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 5.9.7
CVSS
4.9 (medium)
Published
2024-11-21
Title
Premium Packages – Sell Digital Products Securely < 5.9.4 - Reflected Cross-Site Scripting via add_query_arg
Fixed in
Fixed in 5.9.4
CVSS
6.1 (medium)
Published
2024-11-20
Title
Premium Packages - Sell Digital Products Securely < 5.9.4 - Contributor+ Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode
Fixed in
Fixed in 5.9.4
CVSS
5.9 (medium)
Published
2024-11-15
Title
Premium Packages < 6.0.6 - Admin+ SQL Injection
Fixed in
Fixed in 6.0.6
CVSS
4.9 (medium)
Published
2024-09-24
Title
Premium Packages – Sell Digital Products Securely < 5.9.2 - Cross-Site Request Forgery
Fixed in
Fixed in 5.9.2
CVSS
4.3 (medium)
Published
2024-03-25
Title
Premium Packages < 5.8.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.8.3
CVSS
6.1 (medium)
Published
2023-08-11
Title
Premium Packages - Sell Digital Products Securely < 5.7.5 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 5.7.5
CVSS
8.8 (high)