Login Request a demo
PR
Product
Premmerce
by premmerce · last CVE Feb 7, 2026
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities4Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Premmerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-23719
8.8
0%
Jul 17
Cross-Site Request Forgery (CSRF) vulnerability in Premmerce plugin <= 1.3.17 versions
Affected: through 1.3.17
CVE-2025-60241
7.5
0%
Nov 6
WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability
Affected: through 1.3.19
CVE-2026-0555
6.4
0%
Feb 7
Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint
Affected: through 1.3.20
CVE-2025-64288
4.3
0%
Oct 29
WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 1.3.19
Showing 4