Skip to content
OpenAdvisories

Product · Premmerce

Premmerce Dev Tools

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation

    The Premmerce Dev Tools plugin for WordPress is vulnerable to Remote Code Execution via missing authorization in versions up to and including 2.0. This is due to the 'generatePluginHandler' function lacking any authorization check before processing user-suppl…