CVE-2025-24659

CVE-2025-24659 1️⃣ Tipo de componente Plugin WordPress 2️⃣ Detalhes do componente Nome do componente Premium Packages – Sell Digital Products Securely Versão vulnerável = 5.9.6 Slug do componente wpdm-premium-packages Link do componente https://wordpress.org/plugins/wpdm-premium-packages/ 3️⃣ OWASP...

CVE-2026-73190 WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...

CVE-2026-73190

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...

CVE-2026-73190

WPDM – Premium Packages WordPress plugin versions ≤ 7.0.5 contain an unauthenticated reflected XSS vulnerability discovered by Evan NR. A remote attacker can craft a malicious URL requiring no authentication or privileges; a victim visiting it triggers script execution in their browser (scope cha...