Cross-Site Request Forgery Vulnerability in WPDM – Premium Packages by WordPress

CVE-2025-54732

What is CVE-2025-54732?

The Shahjada WPDM – Premium Packages plugin is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows attackers to leverage the trust that a user has in the application, potentially executing unintended actions on their behalf. The issue impacts all versions up to 6.0.2, underscoring the importance of users updating their installations to maintain security and prevent unauthorized actions.

References