Advisories · Technology
codename065 Premium Packages – Sell Digital Products Securely.
Every CVE that names codename065 Premium Packages – Sell Digital Products Securely among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes
- codename065 Premium Packages – Sell Digital Products Securely
- Cross-site scripting (XSS)
- CVSS 7.2 High
Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'
- codename065 Premium Packages – Sell Digital Products Securely
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Premium Packages <= 7.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkout[billing][phone]' Parameter
- codename065 Premium Packages – Sell Digital Products Securely
- Cross-site scripting (XSS)
- CVSS 7.2 High
Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter
- codename065 Premium Packages – Sell Digital Products Securely
- Cross-site scripting (XSS)
- CVSS 7.5 High
Premium Packages <= 6.2.0 - Unauthenticated SQL Injection
- codename065 Premium Packages – Sell Digital Products Securely
- SQL injection
- CVSS 6.3 Medium
Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter
- codename065 Premium Packages – Sell Digital Products Securely
- Authentication bypass
- CVSS 6.5 Medium
Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter
- codename065 Premium Packages – Sell Digital Products Securely
- SQL injection
- CVSS 6.1 Medium
Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg
- codename065 Premium Packages – Sell Digital Products Securely
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode
- codename065 Premium Packages – Sell Digital Products Securely
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery
- codename065 Premium Packages – Sell Digital Products Securely
- Cross-site request forgery (CSRF)
- CVSS 8.8 High
Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation
- codename065 Premium Packages – Sell Digital Products Securely
- Privilege escalation