codename065 Premium Packages – Sell Digital Products Securely

• CVE-2026-110664 Medium 6.4 Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes 0.2%
• CVE-2026-18586 High 7.2 Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email' 0.2%
• CVE-2026-103478 Medium 6.4 Premium Packages <= 7.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkout[billing][phone]' Parameter 0.3%
• CVE-2026-93654 High 7.2 Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter 0.2%
• CVE-2026-12800 High 7.5 Premium Packages <= 6.2.0 - Unauthenticated SQL Injection 1.6%
• CVE-2026-15348 Medium 6.3 Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter 0.6%
• CVE-2026-15906 Medium 6.5 Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter 0.5%
• CVE-2024-11225 Medium 6.1 Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg 0.6%
• CVE-2024-10164 Medium 6.4 Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode 0.5%
• CVE-2024-7386 Medium 4.3 Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery 0.2%
• CVE-2023-4293 High 8.8 Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation 1.0%