WPDM – Premium Packages vulnerabilities

3 known CVE vulnerabilities in WPDM – Premium Packages, translated and rated.

CVE-2026-61948Critical
The WPDM – Premium Packages plugin versions up to 6.2.0 are vulnerable to unauthenticated SQL injection.
CVE-2026-73190High
The WPDM – Premium Packages plugin (W3 Eden) is vulnerable to DOM-Based Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects WPDM – Premium Packages from n/a through 7.0.5.
CVE-2026-61943High
The WPDM – Premium Packages plugin up to version 6.2.0 contains an unauthenticated Broken Access Control vulnerability. An unauthenticated attacker can bypass authorization mechanisms and gain unauthorized access to functions or data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS