Read the docs

Shahjada

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Shahjada records in CISA KEV

No Shahjada vulnerabilities are listed in CISA KEV.

Records

16 records

TI-2026-20141 CVE-2026-24956 · GHSA-wqcv-67x3-mx26

WordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada Download Manager Addons for Elementor wpdm-elementor allows Blind SQL Injection.This issue affects Download M…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00267 Published 2026-02-20 No fix listed CWE-89
TI-2025-18376 CVE-2025-24659 · GHSA-j4c9-86rf-q9fc

WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability

Priority LOW 35

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Pa…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00994 Published 2025-01-24 No fix listed CWE-89
TI-2025-42333 CVE-2025-68874 · GHSA-m8r3-25j5-pg42

WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2026-01-08 No fix listed CWE-79
TI-2025-37458 CVE-2025-60092 · GHSA-pxww-59ph-c5c3

WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability

Priority LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00306 Published 2025-09-26 No fix listed CWE-497
TI-2026-28645 CVE-2026-39676 · GHSA-q462-ghxj-5ffx

WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.52.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00198 Published 2026-04-08 No fix listed CWE-862
TI-2025-22261 CVE-2025-30991 · GHSA-6pwc-frqj-6q7g

WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Stored XSS.This issue affects WPDM – Premium Packages: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-06-06 No fix listed CWE-79
TI-2026-28586 CVE-2026-39615 · GHSA-rg5f-p7fv-c42m

WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Download Manager download-manager allows Stored XSS.This issue affects Download Manager: from n/a through <=…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00179 Published 2026-04-08 No fix listed CWE-79
TI-2025-26302 CVE-2025-39560 · GHSA-228w-3rqr-2658

WordPress Live Forms plugin <= 4.8.4 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through <= 4.8.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00446 Published 2025-04-16 No fix listed CWE-862
TI-2025-22079 CVE-2025-30809 · GHSA-pj72-96mg-hvmq

Missing authorization in Shahjada Live Forms

Priority LOW 25

Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through <= 4.8.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00495 Published 2025-03-27 No fix listed CWE-862
TI-2025-39218 CVE-2025-63070 · GHSA-7pfq-v66h-xmh2

WordPress Download Manager plugin <= 3.3.32 - Sensitive Data Exposure vulnerability

Priority LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00255 Published 2025-12-09 No fix listed CWE-497
TI-2025-34495 CVE-2025-54732 · GHSA-h9cr-38x9-8fg2

WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Cross Site Request Forgery.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-08-14 No fix listed CWE-352
Open these records in search →