A vulnerability categorized as problematic has been discovered in codename065 Premium Packages Plugin up to 7.0.5 on WordPress. This impacts an unknown function. Executing a manipulation of the argument order_email can lead to cross site scripting. The identification of this vulnerability is CVE-2026-18586. The attack may be launched remotely. There is no exploit available.
WordPress
Vulnerability
CVE-2026-18586
VulDB
Apply vendor security patch