Log in Start free

Shahjada

Products

ProductCVEsExploitedLatest
Download Manager7–Oct 2, 2026
WPDM – Premium Packages6–Jul 23, 2026
Live Forms3–Apr 16, 2025
Download Manager Addons for Elementor1–Feb 20, 2026
Visitor Stats Widget1–Jan 8, 2026

Exploited and recent CVEs

  • CVE-2026-94405 Medium 5.3 WordPress Download Manager plugin <= 3.3.71 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-61948 Critical 9.3 WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability 0.4%
  • CVE-2026-61943 High 7.5 WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability 0.4%
  • CVE-2026-39676 Medium 5.3 WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability 0.2%
  • CVE-2026-39615 Medium 5.9 WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24956 Critical 9.3 WordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerability 0.3%
  • CVE-2025-68874 High 7.1 WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63070 Medium 4.3 WordPress Download Manager plugin <= 3.3.32 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-60093 Medium 4.3 WordPress Download Manager Plugin <= 3.3.24 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-60092 Medium 5.3 WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability 0.3%
  • CVE-2025-54732 Medium 4.3 WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-30991 Medium 6.5 WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-39560 Medium 5.4 WordPress Live Forms plugin <= 4.8.4 - Broken Access Control vulnerability 0.4%
  • CVE-2025-32279 Medium 4.3 WordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability 0.3%
  • CVE-2025-30809 Medium 5.4 WordPress WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms plugin <= 4.8.4 - Settings Change vulnerability 0.5%
  • CVE-2025-24659 High 7.6 WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability 1.0%
  • CVE-2024-56217 Medium 4.3 WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability 0.3%
  • CVE-2024-52435 High 7.6 WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability 0.5%