CVE-2026-18586 | codename065 Premium Packages Plugin up to 7.0.5 on WordPress order_email cross site scripting

October 15, 2026 Yanac

A vulnerability categorized as problematic has been discovered in codename065 Premium Packages Plugin up to 7.0.5 on WordPress. This impacts an unknown function. Executing a manipulation of the argument order_email can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-18586. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More