premmerce Premmerce vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20252
4. 20261

Newest CVEs

• CVE-2026-0555

  Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint

  premmerce · Premmerce

  Medium6.4
• CVE-2025-60241

  WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability

  Premmerce · Premmerce

  High7.5
• CVE-2025-64288

  WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability

  Premmerce · Premmerce

  Medium4.3
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2023-23719

  WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)

  Premmerce · Premmerce

  Medium5.4