Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

Vendor: Shahjada Clear all filters
TI-2026-28645 CVE-2026-39676 · GHSA-q462-ghxj-5ffx

WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.52.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00198 Published 2026-04-08 No fix listed CWE-862
TI-2026-28586 CVE-2026-39615 · GHSA-rg5f-p7fv-c42m

WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Download Manager download-manager allows Stored XSS.This issue affects Download Manager: from n/a through <=…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00179 Published 2026-04-08 No fix listed CWE-79
TI-2026-20141 CVE-2026-24956 · GHSA-wqcv-67x3-mx26

WordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada Download Manager Addons for Elementor wpdm-elementor allows Blind SQL Injection.This issue affects Download M…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00267 Published 2026-02-20 No fix listed CWE-89
TI-2025-42333 CVE-2025-68874 · GHSA-m8r3-25j5-pg42

WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2026-01-08 No fix listed CWE-79
TI-2025-39218 CVE-2025-63070 · GHSA-7pfq-v66h-xmh2

WordPress Download Manager plugin <= 3.3.32 - Sensitive Data Exposure vulnerability

Priority LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00255 Published 2025-12-09 No fix listed CWE-497
TI-2025-37458 CVE-2025-60092 · GHSA-pxww-59ph-c5c3

WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability

Priority LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00306 Published 2025-09-26 No fix listed CWE-497
TI-2025-34495 CVE-2025-54732 · GHSA-h9cr-38x9-8fg2

WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Cross Site Request Forgery.This issue affects WPDM – Premium Packages: from n/a through <= 6.0.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-08-14 No fix listed CWE-352
TI-2025-22261 CVE-2025-30991 · GHSA-6pwc-frqj-6q7g

WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Stored XSS.This issue affects WPDM – Premium Packages: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-06-06 No fix listed CWE-79
TI-2025-26302 CVE-2025-39560 · GHSA-228w-3rqr-2658

WordPress Live Forms plugin <= 4.8.4 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through <= 4.8.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00446 Published 2025-04-16 No fix listed CWE-862
TI-2025-22079 CVE-2025-30809 · GHSA-pj72-96mg-hvmq

Missing authorization in Shahjada Live Forms

Priority LOW 25

Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through <= 4.8.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00495 Published 2025-03-27 No fix listed CWE-862
TI-2025-18376 CVE-2025-24659 · GHSA-j4c9-86rf-q9fc

WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability

Priority LOW 35

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Pa…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00994 Published 2025-01-24 No fix listed CWE-89