CVE-2026-61948

The vulnerability allows unauthenticated SQL injection in WPDM – Premium Packages versions up to 6.2.0, potentially enabling attackers to execute arbitrary SQL queries and gain unauthorized access to sensitive data. Organizations using this plugin should prioritize remediation due to the critical severity rating, as exploitation could lead to significant data breaches and compromise of system integrity. Immediate action is recommended for all users of the affected versions to mitigate risks.