CVE-2026-73190

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in WPDM – Premium Packages versions up to 7.0.5. An attacker can inject a malicious script that executes in the victim's browser.

Risk Assessment

Potential session theft, account takeover, or malware distribution.

Recommendation

Update WPDM – Premium Packages to a version that includes the fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.