CVE-2025-24659: Shahjada Wpdm – Premium Packages

High severity, CVSS 7.6. EPSS: 1% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through <= 5.9.6.

Affected products

• Shahjada Wpdm – Premium Packages: up to and including 5.9.6

Published 2025-01-24. Last modified 2026-06-17.