premmerce
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint | premmerce | WordPress | Medium | Fix reported | |
| Premmerce <= 1.3.19 - Cross-Site Request Forgery | premmerce | WordPress | Medium | Fix reported | |
| Premmerce <= 1.3.19 - Unauthenticated Local File Inclusion | premmerce | WordPress | High | Fix reported | |
| Premmerce <= 1.3.18 - Cross-Site Request Forgery via runAction | premmerce | WordPress | Medium | Fix reported |