agentprime: codename065-premium-packages-sell-digital-products-securelyEvery new CVE for codename065-premium-packages-sell-digital-products-securely.https://agentprime.io/CVE-2026-110664: Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Noteshttps://agentprime.io/advisories/CVE-2026-110664/https://agentprime.io/advisories/CVE-2026-110664/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 06:41:00 GMTCVECVE-2026-18586: Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'https://agentprime.io/advisories/CVE-2026-18586/https://agentprime.io/advisories/CVE-2026-18586/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 05:30:21 GMTCVECVE-2026-103478: Premium Packages <= 7.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkout[billing][phone]' Parameterhttps://agentprime.io/advisories/CVE-2026-103478/https://agentprime.io/advisories/CVE-2026-103478/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 07:41:48 GMTCVECVE-2026-93654: Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameterhttps://agentprime.io/advisories/CVE-2026-93654/https://agentprime.io/advisories/CVE-2026-93654/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 07:40:25 GMTCVECVE-2026-12800: Premium Packages <= 6.2.0 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2026-12800/https://agentprime.io/advisories/CVE-2026-12800/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 08:34:36 GMTCVECVE-2026-15348: Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameterhttps://agentprime.io/advisories/CVE-2026-15348/https://agentprime.io/advisories/CVE-2026-15348/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 09:33:56 GMTCVECVE-2026-15906: Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameterhttps://agentprime.io/advisories/CVE-2026-15906/https://agentprime.io/advisories/CVE-2026-15906/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 08:34:40 GMTCVECVE-2024-11225: Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arghttps://agentprime.io/advisories/CVE-2024-11225/https://agentprime.io/advisories/CVE-2024-11225/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Nov 2024 05:33:42 GMTCVECVE-2024-10164: Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcodehttps://agentprime.io/advisories/CVE-2024-10164/https://agentprime.io/advisories/CVE-2024-10164/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Nov 2024 02:06:21 GMTCVECVE-2024-7386: Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgeryhttps://agentprime.io/advisories/CVE-2024-7386/https://agentprime.io/advisories/CVE-2024-7386/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Sep 2024 02:04:58 GMTCVECVE-2023-4293: Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalationhttps://agentprime.io/advisories/CVE-2023-4293/https://agentprime.io/advisories/CVE-2023-4293/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Aug 2023 07:42:51 GMTCVE