Shahjada WPDM – Premium Packages vulnerabilities
6 vulnerabilities
Known vulnerabilities in Shahjada WPDM – Premium Packages, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-54732shahjadawpdm – premium packages+1
EPSS score0.13%
Cross-Site Request Forgery (CSRF) vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Cross Site Request Forgery.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.2.CVE-2025-24659shahjadawpdm – premium packages+1EPSS score0.97%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through <= 5.9.6.CVE-2025-30991shahjadawpdm – premium packages+1EPSS score0.26%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Stored XSS.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.6.CVE-2024-52435shahjadawpdm – premium packages+2EPSS score0.46%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.5.CVE-2026-61943shahjadawpdm – premium packages+1EPSS score0.39%
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.CVE-2026-61948shahjadawpdm – premium packages+1EPSS score0.40%
Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions.