CVE-2025-60241

The CVE-2025-60241 entry concerns the WordPress Premmerce plugin (versions up to 1.3.19) with an improper control of the filename in an include/require statement, resulting in a Local File Inclusion (LFI) vulnerability in Premmerce. Multiple connected sources (Red Hat, NVD/NIST, CVE lists, EUVD/E...

WordPress plugin Premmerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-64288 WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce premmerce allows Cross Site Request Forgery.This issue affects Premmerce: from n/a through = 1.3.19...

CVE-2025-64288 WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce premmerce allows Cross Site Request Forgery.This issue affects Premmerce: from n/a through = 1.3.19...

CVE-2025-64288

The CVE-2025-64288 entry refers to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Premmerce plugin, affecting versions through 1.3.19. The issue is documented in multiple sources (NVD/Red Hat/EUVD/CIRCL/etc.) with consistent wording that Premmerce allows CSRF. The core affecte...

CVE-2025-64285

CVE-2025-64285 affects the WordPress plugin Premmerce Wholesale Pricing for WooCommerce (versions through 1.1.10). Root cause: missing authorization due to incorrectly configured access control security levels, enabling potential unauthorized access. Impact: broken access control could allow priv...

WordPress plugin Premmerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

EUVD-2023-27805

Malicious code in bioql PyPI...

WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Ryan Novotny in WordPress Plugin Premmerce versions = 1.3.19...

CVE-2023-23719

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Premmerce versions = 1.3.19...

Premmerce < 1.3.17 - Cross-Site Request Forgery

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2023-23719

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

CVE-2023-23719

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

CVE-2023-23719 WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

CVE-2023-23719

CVE-2023-23719 affects the WordPress Premmerce plugin, with CSRF vulnerabilities in versions up to 1.3.17 (and variants noted up to 1.3.18 in some sources). The underlying issue is CSRF checks missing in specific paths, enabling unauthorized actions by authenticated users who are tricked into req...

CVE-2023-23719 WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

WordPress Plugin Premmerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2023-19157 · WordPress · Premmerce

Name of the Vulnerable Software and Affected Versions: Premmerce plugin versions = 1.3.17 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application tha...