Advisories · Technology

Premmerce.

Every CVE that names Premmerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-0555 CVE record

CVSS 6.4 Medium

Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint
- Premmerce
- Cross-site scripting (XSS)
Not analysed yet 7 Feb 2026
CVE-2025-60241 CVE record

CVSS 7.5 High

WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability
- Premmerce
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-64288 CVE record

CVSS 4.3 Medium

WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability
- Premmerce
- Cross-site request forgery (CSRF)
Not analysed yet 29 Oct 2025
CVE-2023-23719 CVE record

CVSS 5.4 Medium

WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)
- Premmerce
- Cross-site request forgery (CSRF)
Not analysed yet 17 Jul 2023