CVE-2025-24659: falha de alta gravidade em Shahjada WPDM – Premium Packages
WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.6epss 1.0%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through <= 5.9.6.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
Shahjada · WPDM – Premium PackagesCVEs relacionadas — Shahjada WPDM – Premium Packages
No mesmo produto, das mais perigosas para as menos.
CVE-2024-52435HIGHWordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerabilityEPSS 0.5%CVE-2026-61948CRITICALWordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-61943HIGHWordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-30991MEDIUMWordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-54732MEDIUMWordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%