Skip to content
OpenAdvisories

Vendor

Shahjada

18 known vulnerabilities.

Shahjada at a glance

Last 12 months
8
Critical · all time
2
Exploited · all time
0
Public exploit · all time
2
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 1 vulnerability Dec 2025 January 2026: 1 vulnerability February 2026: 1 vulnerability, 1 critical March 2026: 0 vulnerabilities Mar April 2026: 2 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 2 vulnerabilities, 1 critical August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202600
Aug 202600
Jul 202621
Jun 202600
May 202600
Apr 202620
Mar 202600
Feb 202611
Jan 202610
Dec 202510
Nov 202500
Oct 202500
Sep 202520
Aug 202510
Jul 202500
Jun 202510
May 202500
Apr 202520
Mar 202510
Feb 202500
Jan 202510
Dec 202410

Products

Download Manager 7 WPDM – Premium Packages 6 Live Forms 3 Download Manager Addons for Elementor 1 Visitor Stats Widget 1
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Medium 5.3
    CVE-2026-94405

    WordPress Download Manager plugin <= 3.3.71 - Sensitive Data Exposure vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data. This issue affects Download Manager: from n/a through 3.3.71.

    Shahjada Download Manager
  • Critical 9.3
    CVE-2026-61948

    WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability

    Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions.

    Shahjada WPDM – Premium Packages
  • High 7.5
    CVE-2026-61943

    WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.

    Shahjada WPDM – Premium Packages
  • Medium 5.3
    CVE-2026-39676 Public exploit

    WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.52.

    Shahjada Download Manager
  • Medium 5.9
    CVE-2026-39615

    WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Download Manager download-manager allows Stored XSS.This issue affects Download Manager: from n/a through <= 3.3.53.

    Shahjada Download Manager
  • Critical 9.3
    CVE-2026-24956

    WordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada Download Manager Addons for Elementor wpdm-elementor allows Blind SQL Injection.This issue affects Download Manager Addons for Elementor: from n/a t…

    Shahjada Download Manager Addons for Elementor
  • High 7.1
    CVE-2025-68874

    WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from n/a through <= 1.5.0.

    Shahjada Visitor Stats Widget
  • Medium 4.3
    CVE-2025-63070

    WordPress Download Manager plugin <= 3.3.32 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.32.

    Shahjada Download Manager
  • Medium 4.3
    CVE-2025-60093

    WordPress Download Manager Plugin <= 3.3.24 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Shahjada Download Manager download-manager allows Cross Site Request Forgery.This issue affects Download Manager: from n/a through <= 3.3.24.

    Shahjada Download Manager
  • Medium 5.3
    CVE-2025-60092

    WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.25.

    Shahjada Download Manager
  • Medium 4.3
    CVE-2025-54732

    WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Cross Site Request Forgery.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.2.

    Shahjada WPDM – Premium Packages
  • Medium 6.5
    CVE-2025-30991

    WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Stored XSS.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.6.

    Shahjada WPDM – Premium Packages
  • Medium 5.4
    CVE-2025-39560

    WordPress Live Forms plugin <= 4.8.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through <= 4.8.4.

    Shahjada Live Forms
  • Medium 4.3
    CVE-2025-32279

    WordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through <= 4.8.5.

    Shahjada Live Forms
  • Medium 5.4
    CVE-2025-30809

    WordPress WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms plugin <= 4.8.4 - Settings Change vulnerability

    Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through <= 4.8.4.

    Shahjada Live Forms
  • High 7.6
    CVE-2025-24659 Public exploit

    WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through <= 5.9.6.

    Shahjada WPDM – Premium Packages
  • Medium 4.3
    CVE-2024-56217

    WordPress Download Manager plugin <= 3.3.03 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.03.

    Shahjada Download Manager
  • High 7.6
    CVE-2024-52435

    WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.5.

    Shahjada WPDM – Premium Packages