CVE-2026-61943highCWE-862

CVE-2026-61943: falha de alta gravidade em Shahjada WPDM – Premium Packages

WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability

Publicada em

Seguir esta CVE+ Monitorar WPDM – Premium Packages

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.4%
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Shahjada · WPDM – Premium Packages
CVEs relacionadas — Shahjada WPDM – Premium Packages

No mesmo produto, das mais perigosas para as menos.

CVE-2025-24659HIGHWordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerabilityEPSS 1.0%CVE-2024-52435HIGHWordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerabilityEPSS 0.5%CVE-2026-61948CRITICALWordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-30991MEDIUMWordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-54732MEDIUMWordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%