Advisories · Technology

Shahjada WPDM – Premium Packages.

Every CVE that names Shahjada WPDM – Premium Packages among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-61948 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability
- Shahjada WPDM – Premium Packages
- SQL injection
Not analysed yet 23 Jul 2026
CVE-2026-61943 CVE record

CVSS 7.5 High

WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability
- Shahjada WPDM – Premium Packages
- Broken access control
Not analysed yet 23 Jul 2026
CVE-2025-54732 CVE record

CVSS 4.3 Medium

WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability
- Shahjada WPDM – Premium Packages
- Cross-site request forgery (CSRF)
Not analysed yet 14 Aug 2025
CVE-2025-30991 CVE record

CVSS 6.5 Medium

WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability
- Shahjada WPDM – Premium Packages
- Cross-site scripting (XSS)
Not analysed yet 6 Jun 2025
CVE-2025-24659 CVE record

CVSS 7.6 High

WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability
- Shahjada WPDM – Premium Packages
- SQL injection
Not analysed yet 24 Jan 2025
CVE-2024-52435 CVE record

CVSS 7.6 High

WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability
- Shahjada WPDM – Premium Packages
- SQL injection
Not analysed yet 18 Nov 2024