8.3
High
CVE-2024-27971 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through <= 2.3.10.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Premmerce Permalink Manager for WooCommerce 2.3 | earliest → 2.3.10 | No fix stated |
| permalink_manager_for_woocommerce 2.3 | earliest → 2.3.10 | No fix stated |
Other CVEs of Premmerce Permalink Manager for WooCommerce
The 4 CVEs of Premmerce Permalink Manager for WooCommerce →
CVE-2026-97272
Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions
7.1
High
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Medium
CVE-2022-4974
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
6.3
Medium