{
 "id": "WPSEC-2026-1961",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1961/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1961/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1961/index.md",
 "title": "Premium Packages <= 7.3.0 - Unauthenticated Insecure Direct Object Reference to Guest Billing Information Update",
 "description": "The Premium Packages plugin for WordPress is vulnerable to Insecure Direct Object Reference via the 'update_guest_billing' AJAX action in all versions up to, and including, 7.3.0, due to the handler trusting any encrypted order ID supplied in the 'oid' parameter without verifying that the requester owns the order. This makes it possible for unauthenticated attackers who obtain an encrypted order reference, including values encrypted with the same key in other contexts such as password reset links, to overwrite the billing information of other customers' orders.",
 "plugin": {
  "slug": "wpdm-premium-packages",
  "name": "Premium Packages",
  "full_name": "Premium Packages – Sell Digital Products Securely",
  "wordpress_org": "https://wordpress.org/plugins/wpdm-premium-packages/",
  "advisories_url": "https://wpsec.com/vuln/plugin/wpdm-premium-packages/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/wpdm-premium-packages"
 },
 "type": "IDOR",
 "cwe": [
  "CWE-639"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "7.3.1",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 7.3.1"
  ]
 },
 "introduced_in": null,
 "fixed_in": "7.3.1",
 "remediation": "Update to 7.3.1 or later.",
 "fix_released": "2026-10-28T16:32:39+00:00",
 "published": "2026-10-29T18:50:39+00:00",
 "updated": "2026-10-29T17:47:39.937407+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1961/",
  "https://plugins.svn.wordpress.org/wpdm-premium-packages/tags/7.3.1/",
  "https://wordpress.org/plugins/wpdm-premium-packages/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/wpdm-premium-packages",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-29"
 }
}