CVE-2026-73190

Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.

Credits

Evan NR | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/wpdm-premium-packages/vulnerability/wordpress-wpdm-premium-packages-plugin-7-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve