Skip to content
OpenAdvisories

Vendor

Premmerce

30 known vulnerabilities.

Products

Premmerce Wishlist for WooCommerce 5 Premmerce Wholesale Pricing for WooCommerce 4 Premmerce 4 Premmerce User Roles 4 Premmerce Product Search for WooCommerce 3 Premmerce Redirect Manager 3 Premmerce Brands for WooCommerce 2 Premmerce Permalink Manager for WooCommerce 2 Premmerce Product Filter for WooCommerce 1 Premmerce WooCommerce Customers Manager 1 Premmerce Multi-currency for Woocommerce 1 Premmerce Dev Tools 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.1
    CVE-2026-97273

    WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.

    Premmerce Premmerce Wishlist for WooCommerce Web / CMS
  • High 7.1
    CVE-2026-97268

    WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.

    Premmerce Premmerce Wishlist for WooCommerce Web / CMS
  • High 7.1
    CVE-2026-97272

    WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.13 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions.

    Premmerce Premmerce Permalink Manager for WooCommerce Web / CMS
  • High 8.8
    CVE-2026-6933

    Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation

    The Premmerce Dev Tools plugin for WordPress is vulnerable to Remote Code Execution via missing authorization in versions up to and including 2.0. This is due to the 'generatePluginHandler' function lacking any authorization check before processing user-suppl…

    Premmerce Premmerce Dev Tools Web / CMS
  • High 7.1
    CVE-2025-12411

    Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL Injection

    The Premmerce Wholesale Pricing for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'ID' parameter in versions up to, and including, 1.1.10. This is due to insufficient escaping on the user supplied parameter and lack of sufficient pre…

    Premmerce Premmerce Wholesale Pricing for WooCommerce Web / CMS
  • High 7.5
    CVE-2025-60241

    WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce premmerce allows PHP Local File Inclusion.This issue affects Premmerce: from n/a through <= 1.3.19.

    Premmerce Premmerce
  • High 7.5
    CVE-2025-60194

    WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows PHP Local File Inclusion.This issue affects Premmerce Product S…

    Premmerce Premmerce Product Search for WooCommerce Web / CMS
  • High 7.5
    CVE-2025-60193

    WordPress Premmerce User Roles plugin <= 1.0.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows PHP Local File Inclusion.This issue affects Premmerce User Roles: from n/a thro…

    Premmerce Premmerce User Roles
  • High 7.5
    CVE-2025-60192

    WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows PHP Local File Inclusion.This issue a…

    Premmerce Premmerce Wholesale Pricing for WooCommerce Web / CMS
  • High 7.5
    CVE-2025-60191

    WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wishlist for WooCommerce premmerce-woocommerce-wishlist allows PHP Local File Inclusion.This issue affects Premmerce W…

    Premmerce Premmerce Wishlist for WooCommerce Web / CMS
  • High 8.1
    CVE-2023-41130

    WordPress Premmerce User Roles plugin <= 1.0.12 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through <= 1.0.12.

    Premmerce Premmerce User Roles
  • High 8.3
    CVE-2024-27971

    WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce…

    Premmerce Premmerce Permalink Manager for WooCommerce Web / CMS