Shahjada vulnerabilities
18 vulnerabilities
Known vulnerabilities in Shahjada products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Download Manager7 vulnerabilities
- WPDM – Premium Packages6 vulnerabilities
- Live Forms3 vulnerabilities
- Download Manager Addons For Elementor1 vulnerabilities
- Visitor Stats Widget1 vulnerabilities
CVE-2025-63070shahjadadownload manager+1
EPSS score0.26%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.32.CVE-2025-54732shahjadawpdm – premium packages+1EPSS score0.13%
Cross-Site Request Forgery (CSRF) vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Cross Site Request Forgery.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.2.CVE-2025-68874shahjadavisitor stats widget+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from n/a through <= 1.5.0.CVE-2025-39560shahjadalive forms+1EPSS score0.45%
Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through <= 4.8.4.CVE-2025-24659shahjadawpdm – premium packages+1EPSS score0.97%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through <= 5.9.6.CVE-2025-32279shahjadalive forms+1EPSS score0.25%
Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through <= 4.8.5.CVE-2025-30809shahjadalive forms+1EPSS score0.50%
Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through <= 4.8.4.CVE-2025-30991shahjadawpdm – premium packages+1EPSS score0.26%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Stored XSS.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.6.CVE-2025-60093shahjadadownload manager+1EPSS score0.14%
Cross-Site Request Forgery (CSRF) vulnerability in Shahjada Download Manager download-manager allows Cross Site Request Forgery.This issue affects Download Manager: from n/a through <= 3.3.24.CVE-2025-60092shahjadadownload manager+1EPSS score0.31%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.25.CVE-2024-52435shahjadawpdm – premium packages+2EPSS score0.46%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.5.CVE-2024-56217shahjadadownload manager+2EPSS score0.30%
Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.03.CVE-2026-61943shahjadawpdm – premium packages+1EPSS score0.39%
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.CVE-2026-61948shahjadawpdm – premium packages+1EPSS score0.40%
Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions.CVE-2026-39615shahjadadownload manager+1EPSS score0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Download Manager download-manager allows Stored XSS.This issue affects Download Manager: from n/a through <= 3.3.53.CVE-2026-39676shahjadadownload manager+1EPSS score0.26%
Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.52.CVE-2026-94405shahjadadownload manager+1EPSS score0.33%
Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data.
This issue affects Download Manager: from n/a through 3.3.71.CVE-2026-24956shahjadadownload manager addons for elementor+1EPSS score0.27%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada Download Manager Addons for Elementor wpdm-elementor allows Blind SQL Injection.This issue affects Download Manager Addons for Elementor: from n/a through <= 1.3.0.