7.5
Élevée
CVE-2025-60191 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wishlist for WooCommerce premmerce-woocommerce-wishlist allows PHP Local File Inclusion.This issue affects Premmerce Wishlist for WooCommerce: from n/a through <= 1.1.10.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Premmerce Wishlist for WooCommerce 1.1 | premières → 1.1.10 | Pas de correctif indiqué |
Autres CVE de Premmerce Wishlist for WooCommerce
Les 6 CVE de Premmerce Wishlist for WooCommerce →
CVE-2026-97273
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions
7.1
Élevée
CVE-2026-97268
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions
7.1
Élevée
CVE-2026-54849
Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions
9.3
Critique
CVE-2025-13440
The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up…
5.3
Moyenne