Premium Packages – Sell Digital Products Securely vulnerabilities

3 known vulnerabilities in Premium Packages – Sell Digital Products Securely from Codename065. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Premium Packages – Sell Digital Products…: Improper Neutralization of Input During Web Page Generation

  CVE-2026-18586Oct 15, 2026Codename065

  The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via 'order_email' in all versions up to, and including, 7.0.5 due to insufficient input sanitization and output escaping. Th

• 7.2 High severity

  Premium Packages – Sell Digital Products…: Improper Neutralization of Input During Web Page Generation

  CVE-2026-93654Sep 25, 2026Codename065

  The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter in all versions up to, and including, 7.2.1 due to insufficient input sanitization and output esc

• 7.5 High severity

  Premium Packages – Sell Digital Products…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-12800Jul 28, 2026Codename065EPSS 1.59%

  The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter of the POST /wp-json/wpdmpp/v1/cart/coupon REST API endpoint in versions up to, and including, 6.2.0. This is due to insufficient