CVE-2026-61948

CriticalCVSS 9.3

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Summary

The WPDM – Premium Packages plugin versions up to 6.2.0 are vulnerable to unauthenticated SQL injection.

An unauthenticated attacker can execute arbitrary SQL queries, potentially leading to data leakage or modification.

It is recommended to update the WPDM – Premium Packages plugin to a version later than 6.2.0.

Original NVD description (English source)

Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions.