Plugin icon

Premium Packages – Sell Digital Products Securely

wpdm-premium-packages

Vulnerabilities:

9

Last Updated:

January 2, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2025-08-14
Title
WPDM – Premium Packages < 6.0.3 - Cross-Site Request Forgery
Fixed in
Fixed in 6.0.3
CVSS
4.3 (medium)
Published
2025-06-05
Title
Premium Packages < 6.0.7 - Contributor+ Stored XSS
Fixed in
Fixed in 6.0.7
CVSS
5.9 (medium)
Published
2025-01-24
Title
Premium Packages < 5.9.7 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 5.9.7
CVSS
4.9 (medium)
Published
2024-11-21
Title
Premium Packages – Sell Digital Products Securely < 5.9.4 - Reflected Cross-Site Scripting via add_query_arg
Fixed in
Fixed in 5.9.4
CVSS
6.1 (medium)
Published
2024-11-20
Title
Premium Packages - Sell Digital Products Securely < 5.9.4 - Contributor+ Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode
Fixed in
Fixed in 5.9.4
CVSS
5.9 (medium)
Published
2024-11-15
Title
Premium Packages < 6.0.6 - Admin+ SQL Injection
Fixed in
Fixed in 6.0.6
CVSS
4.9 (medium)
Published
2024-09-24
Title
Premium Packages – Sell Digital Products Securely < 5.9.2 - Cross-Site Request Forgery
Fixed in
Fixed in 5.9.2
CVSS
4.3 (medium)
Published
2024-03-25
Title
Premium Packages < 5.8.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.8.3
CVSS
6.1 (medium)
Published
2023-08-11
Title
Premium Packages - Sell Digital Products Securely < 5.7.5 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 5.7.5
CVSS
8.8 (high)