8.3
Élevée
CVE-2024-27971 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through <= 2.3.10.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Premmerce Permalink Manager for WooCommerce 2.3 | premières → 2.3.10 | Pas de correctif indiqué |
| permalink_manager_for_woocommerce 2.3 | premières → 2.3.10 | Pas de correctif indiqué |
Autres CVE de Premmerce Permalink Manager for WooCommerce
Les 4 CVE de Premmerce Permalink Manager for WooCommerce →
CVE-2026-97272
Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions
7.1
Élevée
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Moyenne
CVE-2022-4974
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
6.3
Moyenne