CveMateVulnerability intelligence

Premmerce vulnerabilities

31 vulnerabilities

Known vulnerabilities in Premmerce products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 15 products.

Products

15

Premmerce Wishlist For Woocommerce6 vulnerabilities
Premmerce5 vulnerabilities
Premmerce User Roles5 vulnerabilities
Premmerce Permalink Manager For Woocommerce4 vulnerabilities
Premmerce Product Search For Woocommerce4 vulnerabilities
Premmerce Redirect Manager4 vulnerabilities
Premmerce Wholesale Pricing For Woocommerce4 vulnerabilities
Premmerce Brands For Woocommerce3 vulnerabilities
Premmerce Product Filter For Woocommerce3 vulnerabilities
Premmerce Woocommerce Customers Manager2 vulnerabilities
Premmerce Dev Tools1 vulnerabilities
Premmerce Multi Currency For Woocommerce1 vulnerabilities
Premmerce SEO For Woocommerce1 vulnerabilities
Premmerce Variation Swatches For Woocommerce1 vulnerabilities
Redirect Manager1 vulnerabilities

CVE-2025-13369premmercepremmerce woocommerce customers manager+19mo ago07-01-2026 07:17

The Premmerce WooCommerce Customers Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'money_spent_from', 'money_spent_to', 'registered_from', and 'registered_to' parameters in all versions up to, and including, 1.1.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrator into performing an action such as clicking on a link.CVE-2025-13440premmercepremmerce wishlist for woocommerce+110mo ago12-12-2025 03:20

The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.1.10. This is due to a missing capability check on the deleteWishlist() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary wishlists.CVE-2025-62883premmercepremmerce user roles+111mo ago27-10-2025 01:33

Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through <= 1.0.13.CVE-2025-62890premmercepremmerce brands for woocommerce+111mo ago27-10-2025 01:33

Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Brands for WooCommerce premmerce-woocommerce-brands allows Cross Site Request Forgery.This issue affects Premmerce Brands for WooCommerce: from n/a through <= 1.2.13.CVE-2025-64291premmercepremmerce user roles+111mo ago29-10-2025 08:38

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Stored XSS.This issue affects Premmerce User Roles: from n/a through <= 1.0.13.CVE-2025-64289premmercepremmerce product search for woocommerce+111mo ago29-10-2025 08:38

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Stored XSS.This issue affects Premmerce Product Search for WooCommerce: from n/a through 2.2.7.CVE-2025-64285premmercepremmerce wholesale pricing for woocommerce+111mo ago29-10-2025 08:38

Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through <= 1.1.10.CVE-2025-64288premmercepremmerce+111mo ago29-10-2025 08:38

Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce premmerce allows Cross Site Request Forgery.This issue affects Premmerce: from n/a through <= 1.3.19.CVE-2025-64290premmercepremmerce product search for woocommerce+111mo ago29-10-2025 08:38

Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Cross Site Request Forgery.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4.CVE-2025-12411premmercepremmerce wholesale pricing for woocommerce+111mo ago18-11-2025 08:27

The Premmerce Wholesale Pricing for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'ID' parameter in versions up to, and including, 1.1.10. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber level access and above, to manipulate SQL queries that can be used to extract sensitive information from the database and modify price type display names in the database via the admin-post.php "premmerce_update_price_type" action, causing cosmetic corruption of the admin interface. The 'price_type' parameter of the "premmerce_delete_price_type" is also vulnerable.CVE-2025-12783premmercepremmerce brands for woocommerce+110mo ago12-12-2025 03:20

The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveBrandsSettings function in all versions up to, and including, 1.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify brand permalink settings.CVE-2025-60191premmercepremmerce wishlist for woocommerce+111mo ago06-11-2025 15:54

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wishlist for WooCommerce premmerce-woocommerce-wishlist allows PHP Local File Inclusion.This issue affects Premmerce Wishlist for WooCommerce: from n/a through <= 1.1.10.CVE-2025-60192premmercepremmerce wholesale pricing for woocommerce+111mo ago06-11-2025 15:54

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows PHP Local File Inclusion.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through <= 1.1.10.CVE-2025-60193premmercepremmerce user roles+111mo ago06-11-2025 15:54

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows PHP Local File Inclusion.This issue affects Premmerce User Roles: from n/a through <= 1.0.13.CVE-2025-60241premmercepremmerce+111mo ago06-11-2025 15:55

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce premmerce allows PHP Local File Inclusion.This issue affects Premmerce: from n/a through <= 1.3.19.CVE-2025-60194premmercepremmerce product search for woocommerce+111mo ago06-11-2025 15:54

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows PHP Local File Inclusion.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4.CVE-2022-49745starpluginseasy_age_verify+12392y ago16-10-2024 06:43

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.CVE-2024-13362100pluginsopen_user_map+2625mo ago01-05-2026 05:29

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.CVE-2024-31359premmercepremmerce_product_filter_for_woocommerce+12y ago09-06-2024 17:20

Missing Authorization vulnerability in Premmerce Premmerce Product Filter for WooCommerce premmerce-woocommerce-product-filter.This issue affects Premmerce Product Filter for WooCommerce: from n/a through <= 3.7.2.CVE-2024-27971premmercepremmerce permalink manager for woocommerce+12y ago17-05-2024 08:51

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through <= 2.3.10.