9.3
Critical
CVE-2026-54849 Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions
Description
Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Premmerce Wishlist for WooCommerce 1.1 | earliest → 1.1.11 | No fix stated |
Other CVEs of Premmerce Wishlist for WooCommerce
The 6 CVEs of Premmerce Wishlist for WooCommerce →
CVE-2026-97273
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions
7.1
High
CVE-2026-97268
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions
7.1
High
CVE-2025-13440
The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up…
5.3
Medium
CVE-2025-60191
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
High