High · 7.1 CVE-2026-97273 EUVD-2026-90837GHSA-4fcq-v4r2-cj5q

WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

Published Oct 1, 2026 · Updated Oct 3, 2026 · Assigned by Patchstack

Vendor: Premmerce Product: Premmerce Wishlist for WooCommerce Category: Web / CMS

Description

Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.

Affected products

Vendor	Product	Affected	Fixed
Premmerce	Premmerce Wishlist for WooCommerce	≤ 1.1.13	—

References

https://patchstack.com/database/wordpress/plugin/premmerce-woocommerce-wishlist/vulnerability/wordpress-premmerce-wishlist-for-woocommerce-plugin-1-1-13-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry