CVEs we hold for Premmerce
Records whose assigning authority named Premmerce as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-6933Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin…Premmerce Dev Tools
CVE-2026-54849WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerabilityPremmerce Wishlist for WooCommerce
CVE-2026-32541WordPress Premmerce Redirect Manager plugin <= 1.0.12 - Broken Access Control vulnerabilityPremmerce Redirect Manager
CVE-2026-0555Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX…Premmerce
CVE-2025-64291WordPress Premmerce User Roles plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerabilityPremmerce User Roles
CVE-2025-64290WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerabilityPremmerce Product Search for WooCommerce
CVE-2025-64289WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerabilityPremmerce Product Search for WooCommerce
CVE-2025-64288WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerabilityPremmerce
CVE-2025-64285WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Broken Access Control vulnerabilityPremmerce Wholesale Pricing for WooCommerce
CVE-2025-62890WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Cross Site Request Forgery (CSRF) vulnerabilityPremmerce Brands for WooCommerce
CVE-2025-62883WordPress Premmerce User Roles plugin <= 1.0.13 - Broken Access Control vulnerabilityPremmerce User Roles
CVE-2025-60194WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerabilityPremmerce Product Search for WooCommerce
CVE-2025-60193WordPress Premmerce User Roles plugin <= 1.0.13 - Local File Inclusion vulnerabilityPremmerce User Roles
CVE-2025-60192WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerabilityPremmerce Wholesale Pricing for WooCommerce
CVE-2025-60191WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerabilityPremmerce Wishlist for WooCommerce
CVE-2025-13440Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist…Premmerce Wishlist for WooCommerce
CVE-2025-13369Premmerce WooCommerce Customers Manager <= 1.1.14 - Reflected Cross-Site ScriptingPremmerce WooCommerce Customers Manager
CVE-2025-12783Premmerce Brands for WooCommerce <= 1.2.13 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink…Premmerce Brands for WooCommerce
CVE-2025-12411Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL InjectionPremmerce Wholesale Pricing for WooCommerce
CVE-2024-31359WordPress Premmerce Product Filter for WooCommerce plugin <= 3.7.2 - Broken Access Control vulnerabilityPremmerce Product Filter for WooCommerce
CVE-2024-27971WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerabilityPremmerce Permalink Manager for WooCommerce
CVE-2023-41130WordPress Premmerce User Roles plugin <= 1.0.12 - Broken Access Control vulnerabilityPremmerce User Roles
CVE-2023-23789WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)Premmerce Redirect Manager
CVE-2023-23787WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)Premmerce Redirect Manager
CVE-2023-23719WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)Premmerce
26 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.