High · 7.1 CVE-2026-73190 EUVD-2026-60768GHSA-242w-mmc3-4r3x

WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability

Published Aug 18, 2026 · Updated Oct 14, 2026 · Assigned by Patchstack

Vendor: W3 Eden Product: WPDM – Premium Packages

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden WPDM – Premium Packages wpdm-premium-packages allows DOM-Based XSS.This issue affects WPDM – Premium Packages: from n/a through 7.0.5.

Affected products

Vendor	Product	Affected	Fixed
W3 Eden	WPDM – Premium Packages	≤ 7.0.5	—

References

https://patchstack.com/database/wordpress/plugin/wpdm-premium-packages/vulnerability/wordpress-wpdm-premium-packages-plugin-7-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry