Skip to content
OpenAdvisories

Vendor

Shahjada

18 known vulnerabilities.

Products

Download Manager 7 WPDM – Premium Packages 6 Live Forms 3 Download Manager Addons for Elementor 1 Visitor Stats Widget 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-61943

    WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.

    Shahjada WPDM – Premium Packages
  • High 7.1
    CVE-2025-68874

    WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from n/a through <= 1.5.0.

    Shahjada Visitor Stats Widget
  • High 7.6
    CVE-2025-24659 Public exploit

    WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through <= 5.9.6.

    Shahjada WPDM – Premium Packages
  • High 7.6
    CVE-2024-52435

    WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.5.

    Shahjada WPDM – Premium Packages