Premmerce vulnerabilities

Products

• Wishlist For Woocommerce 6
• Premmerce 5
• User Roles 5
• Permalink Manager For Woocommerce 4
• Product Search For Woocommerce 4
• Redirect Manager 4
• Wholesale Pricing For Woocommerce 4
• Brands For Woocommerce 3
• Product Filter For Woocommerce 3
• Woocommerce Customers Manager 2

Newest

• premmerce wishlist for woocommerce WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-97273 7.1 HighOctober 1, 2026
• premmerce wishlist for woocommerce WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-97268 7.1 HighOctober 1, 2026
• premmerce permalink manager for woocommerce WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-97272 7.1 HighSeptember 30, 2026
• premmerce wishlist for woocommerce WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability CVE-2026-54849 9.3 CriticalJune 25, 2026
• premmerce dev tools Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation CVE-2026-6933 8.8 HighJune 16, 2026
• 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
• premmerce redirect manager WordPress Premmerce Redirect Manager plugin <= 1.0.12 - Broken Access Control vulnerability CVE-2026-32541 6.5 MediumMarch 25, 2026
• premmerce Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint CVE-2026-0555 6.4 MediumFebruary 7, 2026
• premmerce woocommerce customers manager Premmerce WooCommerce Customers Manager <= 1.1.14 - Reflected Cross-Site Scripting CVE-2025-13369 6.1 MediumJanuary 7, 2026
• premmerce wishlist for woocommerce Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletion CVE-2025-13440 5.3 MediumDecember 12, 2025
• premmerce brands for woocommerce Premmerce Brands for WooCommerce <= 1.2.13 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink Settings Update CVE-2025-12783 4.3 MediumDecember 12, 2025
• premmerce wholesale pricing for woocommerce Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL Injection CVE-2025-12411 7.1 HighNovember 18, 2025
• premmerce WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability CVE-2025-60241 7.5 HighNovember 6, 2025
• premmerce product search for woocommerce WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerability CVE-2025-60194 7.5 HighNovember 6, 2025
• premmerce user roles WordPress Premmerce User Roles plugin <= 1.0.13 - Local File Inclusion vulnerability CVE-2025-60193 7.5 HighNovember 6, 2025
• premmerce wholesale pricing for woocommerce WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability CVE-2025-60192 7.5 HighNovember 6, 2025
• premmerce wishlist for woocommerce WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability CVE-2025-60191 7.5 HighNovember 6, 2025
• premmerce user roles WordPress Premmerce User Roles plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability CVE-2025-64291 5.9 MediumOctober 29, 2025
• premmerce product search for woocommerce WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-64290 4.3 MediumOctober 29, 2025
• premmerce product search for woocommerce WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-64289 5.9 MediumOctober 29, 2025
• premmerce WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-64288 4.3 MediumOctober 29, 2025
• premmerce wholesale pricing for woocommerce WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Broken Access Control vulnerability CVE-2025-64285 5.4 MediumOctober 29, 2025
• premmerce brands for woocommerce WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-62890 4.3 MediumOctober 27, 2025
• premmerce user roles WordPress Premmerce User Roles plugin <= 1.0.13 - Broken Access Control vulnerability CVE-2025-62883 4.3 MediumOctober 27, 2025
• premmerce user roles WordPress Premmerce User Roles plugin <= 1.0.12 - Broken Access Control vulnerability CVE-2023-41130 8.1 HighDecember 13, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• premmerce product filter for woocommerce WordPress Premmerce Product Filter for WooCommerce plugin <= 3.7.2 - Broken Access Control vulnerability CVE-2024-31359 4.3 MediumJune 9, 2024
• premmerce permalink manager for woocommerce WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability CVE-2024-27971 8.3 HighMay 17, 2024
• premmerce WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23719 5.4 MediumJuly 17, 2023
• premmerce redirect manager WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23787 4.3 MediumJuly 10, 2023
• premmerce redirect manager WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23789 5.9 MediumMay 10, 2023