Premmerce
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Premmerce Wishlist for WooCommerce | 5 | – | Oct 1, 2026 |
| Premmerce | 4 | – | Feb 7, 2026 |
| Premmerce Wholesale Pricing for WooCommerce | 4 | – | Nov 18, 2025 |
| Premmerce User Roles | 4 | – | Nov 6, 2025 |
| Premmerce Product Search for WooCommerce | 3 | – | Nov 6, 2025 |
| Premmerce Redirect Manager | 3 | – | Mar 25, 2026 |
| Premmerce Permalink Manager for WooCommerce | 2 | – | Sep 30, 2026 |
| Premmerce Brands for WooCommerce | 2 | – | Dec 12, 2025 |
| Premmerce WooCommerce Customers Manager | 1 | – | Jan 7, 2026 |
| Premmerce Multi-currency for Woocommerce | 1 | – | Oct 16, 2024 |
| Premmerce Dev Tools | 1 | – | Jun 16, 2026 |
| Premmerce Product Filter for WooCommerce | 1 | – | Jun 9, 2024 |
Exploited and recent CVEs
- CVE-2026-97273 WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-97268 WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-97272 WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.13 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2026-54849 WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability 0.4%
- CVE-2026-6933 Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation 0.8%
- CVE-2026-32541 WordPress Premmerce Redirect Manager plugin <= 1.0.12 - Broken Access Control vulnerability 0.2%
- CVE-2026-0555 Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint 0.3%
- CVE-2025-13369 Premmerce WooCommerce Customers Manager <= 1.1.14 - Reflected Cross-Site Scripting 0.3%
- CVE-2025-13440 Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletion 0.3%
- CVE-2025-12783 Premmerce Brands for WooCommerce <= 1.2.13 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink Settings Update 0.3%
- CVE-2025-12411 Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL Injection 0.3%
- CVE-2025-60241 WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability 0.5%
- CVE-2025-60194 WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerability 0.5%
- CVE-2025-60193 WordPress Premmerce User Roles plugin <= 1.0.13 - Local File Inclusion vulnerability 0.5%
- CVE-2025-60192 WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability 0.5%
- CVE-2025-60191 WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability 0.5%
- CVE-2025-64291 WordPress Premmerce User Roles plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-64290 WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-64289 WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-64288 WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-64285 WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Broken Access Control vulnerability 0.2%
- CVE-2025-62890 WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-62883 WordPress Premmerce User Roles plugin <= 1.0.13 - Broken Access Control vulnerability 0.3%
- CVE-2023-41130 WordPress Premmerce User Roles plugin <= 1.0.12 - Broken Access Control vulnerability 0.6%
- CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
- CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
- CVE-2024-31359 WordPress Premmerce Product Filter for WooCommerce plugin <= 3.7.2 - Broken Access Control vulnerability 0.3%
- CVE-2024-27971 WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability 1.5%
- CVE-2023-23719 WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-23787 WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%