WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
premmerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
premmerce
Published
2025-07-02
Title
Premmerce < 1.3.20 - Unauthenticated Local File Inclusion
Slug
premmerce
Published
2025-05-10
Title
Premmerce < 1.3.20 - Cross-Site Request Forgery
Slug
premmerce
Published
2026-02-06
Title
Premmerce < 1.3.21 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint
Slug
premmerce-redirect-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
premmerce-redirect-manager
Published
2023-03-30
Title
Premmerce Redirect Manager < 1.0.11 - Cross-Site Request Forgery
Slug
premmerce-redirect-manager
Published
2023-03-30
Title
Premmerce Redirect Manager < 1.0.12 - Admin+ Stored XSS
Slug
premmerce-redirect-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
premmerce-redirect-manager
Published
2023-11-13
Title
Premmerce Redirect Manager < 1.0.12 - Admin+ Stored XSS
Slug
premmerce-redirect-manager
Published
2026-03-20
Title
Premmerce Redirect Manager < 1.0.13 - Missing Authorization
Slug
premmerce-search
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
premmerce-search
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
premmerce-search
Published
2025-07-28
Title
Premmerce Product Search for WooCommerce < 2.2.5 - Unauthenticated Local File Inclusion
Slug
premmerce-search
Published
2025-05-10
Title
Premmerce Product Search for WooCommerce < 2.2.5 - Cross-Site Request Forgery
Slug
premmerce-search
Published
2025-05-10
Title
Premmerce Product Search for WooCommerce <= 2.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
premmerce-user-roles
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
premmerce-user-roles
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
premmerce-user-roles
Published
2023-08-24
Title
Premmerce User Roles < 1.0.13 - Missing Authorization via role management functions
Slug
premmerce-user-roles
Published
2025-06-13
Title
Premmerce User Roles < 1.0.14 - Missing Authorization
Slug
premmerce-user-roles
Published
2025-05-10
Title
Premmerce User Roles < 1.0.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
premmerce-user-roles
Published
2025-07-28
Title
Premmerce User Roles < 1.0.14 - Unauthenticated Local File Inclusion
Slug
premmerce-woocommerce-brands
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
premmerce-woocommerce-brands
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
premmerce-woocommerce-brands
Published
2025-08-22
Title
Premmerce Brands for WooCommerce < 1.2.14 - Cross-Site Request Forgery
Slug
premmerce-woocommerce-brands
Published
2025-12-11
Title
Premmerce Brands for WooCommerce < 1.2.14 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink Settings Update