codename065 vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20232
3. 202416
4. 20257
5. 202621

Newest CVEs

• CVE-2026-110664

  Premium Packages <= 7.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes

  codename065 · Premium Packages – Sell Digital Products Securely

  Medium6.4
• CVE-2026-18586

  Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'

  codename065 · Premium Packages – Sell Digital Products Securely

  High7.2
• CVE-2026-103478

  Premium Packages <= 7.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkout[billing][phone]' Parameter

  codename065 · Premium Packages – Sell Digital Products Securely

  Medium6.4
• CVE-2026-12054

  Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' Parameter

  codename065 · Download Manager

  Medium6.1
• CVE-2026-9696

  Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode

  codename065 · Download Manager

  Medium6.4
• CVE-2026-103964

  Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email

  codename065 · Download Manager

  Medium4.3
• CVE-2026-102401

  Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode Attribute

  codename065 · Download Manager

  Medium6.4
• CVE-2026-97338

  Download Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name

  codename065 · Download Manager

  Medium6.4
• CVE-2026-93654

  Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter

  codename065 · Premium Packages – Sell Digital Products Securely

  High7.2
• CVE-2026-92714

  Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' Parameter

  codename065 · Download Manager

  Medium6.5