CVE-2026-61943
HighCVSS 7.5Summary
The WPDM – Premium Packages plugin up to version 6.2.0 contains an unauthenticated Broken Access Control vulnerability. An unauthenticated attacker can bypass authorization mechanisms and gain unauthorized access to functions or data.
Risk Assessment
The risk includes unauthorized access to sensitive functions or data, which may lead to confidentiality and integrity breaches.
Recommendation
Immediately update the WPDM – Premium Packages plugin to the latest available version that fixes this vulnerability.
Other vulnerabilities in WPDM – Premium Packages
See all- CVE-2026-61948Critical
The WPDM – Premium Packages plugin versions up to 6.2.0 are vulnerable to unauthenticated SQL injection.
- CVE-2026-73190High
Unauthenticated Cross Site Scripting (XSS) vulnerability in WPDM – Premium Packages versions up to 7.0.5. An attacker can inject a malicious script that executes in the victim's browser.
Original NVD description (English source)
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.