5.3
Moyenne
CVE-2025-13440 The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up…
Description
The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.1.10. This is due to a missing capability check on the deleteWishlist() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary wishlists.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Premmerce Wishlist for WooCommerce 1.1 | premières → 1.1.10 | Pas de correctif indiqué |
Autres CVE de Premmerce Wishlist for WooCommerce
Les 6 CVE de Premmerce Wishlist for WooCommerce →
CVE-2026-97273
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions
7.1
Élevée
CVE-2026-97268
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions
7.1
Élevée
CVE-2026-54849
Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions
9.3
Critique
CVE-2025-60191
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
Élevée