Premium Packages – Sell Digital Products Securely

71 Quality Score

Active Installs

15/30

With roughly 3,000 active installs and a popularity score of 52 out of 30, the plugin shows modest but healthy traction relative to its niche size.

Update Freshness

25/25

A perfect 100 out of 25 for maintenance indicates the developer is actively keeping the plugin current, with the last update logged on 8 July 2026 and confirmed compatibility through WordPress 7.0.1.

User Rating

9/15

The user rating sits at 61 out of 15 based on only 4 total reviews, which is too small a sample to draw strong conclusions about real-world satisfaction.

Support Health

8/15

Support health lands at 50 out of 15 with zero support threads opened and zero resolved, signalling either very low ticket volume or an undeveloped public support channel.

WP Compatibility

15/15

Compatibility scores 100 out of 15, reflecting tested support up to WordPress 7.0.1 and a minimum requirement of WordPress 5.3, though no PHP version is declared.

Scores higher than 26% of indexed plugins

About

Premium Packages is a free, full-featured WordPress eCommerce plugin to sell digital products easily and securely.

Active Installs 2k+

Rating ★★★½ 3.8/5

Last Updated 2026-09-27 12:56pm GMT

Requires WordPress 5.3+

Tested Up To 7.1.2

Security History

17 known vulnerabilities, all patched

5 High 12 Medium

Most recent: September 24, 2026

View details ▸

Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter High

September 24, 2026 Patched in ["7.2.2"] CVE-2026-93654

Premium Packages – Sell Digital Products Securely < 7.0.7 - Authenticated (Subscriber+) Payment Bypass Medium

August 20, 2026 Patched in ["7.0.7"] CVE-2026-19711

Premium Packages – Sell Digital Products Securely <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting High

August 18, 2026 Patched in ["7.0.6"] CVE-2026-73190

Premium Packages <= 6.2.0 - Unauthenticated SQL Injection High

July 27, 2026 Patched in ["7.0.0"] CVE-2026-12800

Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter Medium

July 22, 2026 Patched in ["7.0.5"] CVE-2026-15348

Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter Medium

July 22, 2026 Patched in ["7.0.5"] CVE-2026-15906

Premium Packages – Sell Digital Products Securely <= 6.2.0 - Missing Authorization Medium

July 16, 2026 Patched in ["7.0.0"] CVE-2026-61943

Premium Packages – Sell Digital Products Securely <= 6.2.0 - Unauthenticated SQL Injection High

July 16, 2026 Patched in ["7.0.0"] CVE-2026-61948

WPDM – Premium Packages <= 6.0.2 - Cross-Site Request Forgery Medium

August 14, 2025 Patched in ["6.0.3"] CVE-2025-54732

Premium Packages <= 6.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

June 5, 2025 Patched in ["6.0.7"] CVE-2025-30991

Premium Packages <= 5.9.6 - Authenticated (Administrator+) SQL Injection Medium

January 24, 2025 Patched in ["5.9.7"] CVE-2025-24659

Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg Medium

November 21, 2024 Patched in ["5.9.4"] CVE-2024-11225

Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode Medium

November 20, 2024 Patched in ["5.9.4"] CVE-2024-10164

Premium Packages <= 6.0.5 - Authenticated (Administrator+) SQL Injection Medium

November 15, 2024 Patched in ["6.0.6"] CVE-2024-52435

Premium Packages – Sell Digital Products Securely <= 5.9.1 - Cross-Site Request Forgery Medium

September 24, 2024 Patched in ["5.9.2"] CVE-2024-7386

Premium Packages <= 5.8.2 - Reflected Cross-Site Scripting Medium

March 25, 2024 Patched in ["5.8.3"] CVE-2024-29924

Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation High

August 11, 2023 Patched in ["5.7.5"] CVE-2023-4293

What It Does

Premium Packages is a free WordPress plugin that lets you sell digital products directly from your site, handling product listings, checkout, and secure file delivery after payment. It bundles cart, order management, and download protection into a single eCommerce system aimed at digital sellers.

Who It's For

This plugin is best suited for small sellers of digital goods such as eBooks, music, software, PDFs, or course materials who want a lightweight, standalone store without the overhead of WooCommerce. It suits site owners who prefer a turnkey cart and digital delivery solution rather than stitching together multiple extensions.

Who Should Skip It

If you already run WooCommerce or need a mature catalogue of extensions, payment gateways, and shipping integrations, skip this plugin. Larger stores or anyone needing subscription billing, memberships, or physical product support should look at WooCommerce or Download Monitor instead.

The Bottom Line

Premium Packages delivers a compact, free digital storefront with strong maintenance signals, but its tiny install base and nearly empty support history make it a calculated choice. It is a reasonable pick for small digital sellers who want simplicity over scale, yet anyone running a serious store should default to WooCommerce or Download Monitor for proven reliability.

Related Plugins

WooCommerce 96/100

Pick WooCommerce when you need the broadest ecosystem of payment gateways, shipping add-ons, and third-party extensions, accepting its heavier setup cost.

Download Monitor 90/100

Choose Download Monitor when your priority is managing and tracking downloadable files rather than running a full storefront, and you want to pair it with another cart plugin.

Mercado Pago payments for WooCommerce 88/100

Pick this add-on when you operate primarily in Latin America, need Mercado Pago as a gateway, and already use WooCommerce.

Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation 87/100

Opt for OptinMonster when lead generation and email capture are the primary goal rather than direct digital product sales.

TI WooCommerce Wishlist

Pick TI WooCommerce Wishlist only as a supplementary tool layered onto WooCommerce to add save-for-later functionality, not as a standalone storefront.