CVE-2026-73190 WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...

CVE-2026-73190

WPDM – Premium Packages WordPress plugin versions ≤ 7.0.5 contain an unauthenticated reflected XSS vulnerability discovered by Evan NR. A remote attacker can craft a malicious URL requiring no authentication or privileges; a victim visiting it triggers script execution in their browser (scope cha...