premmerce vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20244
3. 202515
4. 20269

Newest CVEs

• CVE-2026-97273

  WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

  Premmerce · Premmerce Wishlist for WooCommerce

  High7.1
• CVE-2026-97268

  WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

  Premmerce · Premmerce Wishlist for WooCommerce

  High7.1
• CVE-2026-97272

  WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.13 - Cross Site Scripting (XSS) vulnerability

  Premmerce · Premmerce Permalink Manager for WooCommerce

  High7.1
• CVE-2026-54849

  WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability

  Premmerce · Premmerce Wishlist for WooCommerce

  Critical9.3
• CVE-2026-6933

  Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation

  premmerce · Premmerce Dev Tools

  High8.8
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-32541

  WordPress Premmerce Redirect Manager plugin <= 1.0.12 - Broken Access Control vulnerability

  Premmerce · Premmerce Redirect Manager

  Medium6.5
• CVE-2026-0555

  Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint

  premmerce · Premmerce

  Medium6.4
• CVE-2025-13369

  Premmerce WooCommerce Customers Manager <= 1.1.14 - Reflected Cross-Site Scripting

  premmerce · Premmerce WooCommerce Customers Manager

  Medium6.1
• CVE-2025-13440

  Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletion

  premmerce · Premmerce Wishlist for WooCommerce

  Medium5.3