Critical · 9.3 CVE-2026-54849 EUVD-2026-39373GHSA-vqcv-7pvp-5rhv

WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability

Published Jun 25, 2026 · Updated Jun 25, 2026 · Assigned by Patchstack

Vendor: Premmerce Product: Premmerce Wishlist for WooCommerce Category: Web / CMS

Description

Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions.

Affected products

Vendor	Product	Affected	Fixed
Premmerce	Premmerce Wishlist for WooCommerce	≤ 1.1.11	—

References

https://patchstack.com/database/wordpress/plugin/premmerce-woocommerce-wishlist/vulnerability/wordpress-premmerce-wishlist-for-woocommerce-plugin-1-1-11-sql-injection-vulnerability?_s_id=cve vdb-entry