Description
Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Shahjada | WPDM – Premium Packages | ≤ 6.2.0 | — |
Critical · 9.3
CVE-2026-61948
EUVD-2026-48206GHSA-6gm8-xgr5-q465
WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack