CVE-2025-24659

CVE-2025-24659 1️⃣ Component type Plugin WordPress 2️⃣ Dettagli del componente Nome del componente Premium Packages – Sell Digital Products Securely Versione vulnerabile = 5.9.6 Slug del componente wpdm-premium-packages Link del componente https://wordpress.org/plugins/wpdm-premium-packages/ 3️⃣...

CVE-2026-73190 WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...

CVE-2026-73190

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...

CVE-2026-73190

WPDM – Premium Packages WordPress plugin versions ≤ 7.0.5 contain an unauthenticated reflected XSS vulnerability discovered by Evan NR. A remote attacker can craft a malicious URL requiring no authentication or privileges; a victim visiting it triggers script execution in their browser (scope cha...