Vulnerabilidades do Premmerce Premmerce Wishlist for WooCommerce
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Premmerce Premmerce Wishlist for WooCommerce: 5 registro(s), com versões afetadas e correções.
CVE-2026-97273
Alta · 7.1
CWE-79 01/10/2026
WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.
CVE-2026-97268
Alta · 7.1
CWE-79 01/10/2026
WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.
CVE-2026-54849
Crítica · 9.3
CWE-89 25/06/2026
Injeção de SQL não autenticada no Premmerce Wishlist para WooCommerce
SQL Injection não autenticada no Premmerce Wishlist para WooCommerce nas versões <= 1.1.11.
CVE-2025-13440
Média · 5.3
CWE-862 12/12/2025
Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletion
The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.1.10. This is due to a missing capability check on the deleteWishlist() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary wishlists.
CVE-2025-60191
Alta · 7.5
CWE-98 06/11/2025
WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wishlist for WooCommerce premmerce-woocommerce-wishlist allows PHP Local File Inclusion.This issue affects Premmerce Wishlist for WooCommerce: from n/a through <= 1.1.10.