Premmerce Premmerce

• CVE-2026-0555 Medium 6.4 Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint 0.3%
• CVE-2025-60241 High 7.5 WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability 0.5%
• CVE-2025-64288 Medium 4.3 WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
• CVE-2023-23719 Medium 5.4 WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%