Lucene search
+L

285 matches found

NVD
NVD
added 2025/10/29 9:15 a.m.5 views

CVE-2025-64285

Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through = 1.1.10...

5.4CVSS0.00197EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/29 8:38 a.m.24 views

CVE-2025-64290 WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Cross Site Request Forgery.This issue affects Premmerce Product Search for WooCommerce: from n/a through = 2.2.4...

4.3CVSS0.00117EPSS
Exploits0References1
CVE
CVE
added 2025/10/29 8:38 a.m.19 views

CVE-2025-64290

CVE-2025-64290 is a CSRF vulnerability in the WordPress plugin Premmerce Product Search for WooCommerce (premmerce-search), affecting versions up to 2.2.4. The issue is described as Cross-Site Request Forgery that could allow an attacker to perform actions on behalf of an authenticated user. The ...

4.3CVSS6.5AI score0.00117EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 8:38 a.m.4 views

CVE-2025-64290 WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Cross Site Request Forgery.This issue affects Premmerce Product Search for WooCommerce: from n/a through = 2.2.4...

4.3CVSS6.5AI score0.00117EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 8:38 a.m.3 views

CVE-2025-64291 WordPress Premmerce User Roles plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Stored XSS.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

5.9CVSS5.6AI score0.00166EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/29 8:38 a.m.34 views

CVE-2025-64291 WordPress Premmerce User Roles plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Stored XSS.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

5.9CVSS0.00166EPSS
Exploits0References1
CVE
CVE
added 2025/10/29 8:38 a.m.32 views

CVE-2025-64291

CVE-2025-64291 concerns the WordPress plugin Premmerce User Roles (versions

5.9CVSS5.6AI score0.00166EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/29 8:38 a.m.14 views

CVE-2025-64289 WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Stored XSS.This issue affects Premmerce Product Search for WooCommerce: from n/a through = 2.2.5...

5.9CVSS0.00166EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/29 8:38 a.m.10 views

CVE-2025-64288 WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce premmerce allows Cross Site Request Forgery.This issue affects Premmerce: from n/a through = 1.3.19...

4.3CVSS0.00117EPSS
Exploits0References1
CVE
CVE
added 2025/10/29 8:38 a.m.25 views

CVE-2025-64289

CVE-2025-64289 affects the WordPress plugin Premmerce Product Search for WooCommerce (premmerce-search), with versions up to and including 2.2.4. The issue is Improper Neutralization of Input During Web Page Generation, leading to a Stored Cross-Site Scripting (XSS) vulnerability. The CVSS indica...

5.9CVSS5.9AI score0.00166EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 8:38 a.m.3 views

CVE-2025-64289 WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Stored XSS.This issue affects Premmerce Product Search for WooCommerce: from n/a through = 2.2.5...

5.9CVSS5.2AI score0.00166EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 8:38 a.m.3 views

CVE-2025-64288 WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce premmerce allows Cross Site Request Forgery.This issue affects Premmerce: from n/a through = 1.3.19...

4.3CVSS6.5AI score0.00117EPSS
Exploits0References1
CVE
CVE
added 2025/10/29 8:38 a.m.15 views

CVE-2025-64288

The CVE-2025-64288 entry refers to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Premmerce plugin, affecting versions through 1.3.19. The issue is documented in multiple sources (NVD/Red Hat/EUVD/CIRCL/etc.) with consistent wording that Premmerce allows CSRF. The core affecte...

4.3CVSS6.5AI score0.00117EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 8:38 a.m.4 views

CVE-2025-64285 WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through = 1.1.10...

5.4CVSS6.6AI score0.00197EPSS
Exploits0References1
CVE
CVE
added 2025/10/29 8:38 a.m.33 views

CVE-2025-64285

CVE-2025-64285 affects the WordPress plugin Premmerce Wholesale Pricing for WooCommerce (versions through 1.1.10). Root cause: missing authorization due to incorrectly configured access control security levels, enabling potential unauthorized access. Impact: broken access control could allow priv...

5.4CVSS6.6AI score0.00197EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/29 8:38 a.m.16 views

CVE-2025-64285 WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through = 1.1.10...

5.4CVSS0.00197EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.6 views

Wordpress plugin Premmerce Wholesale Pricing for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.5AI score0.00197EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.6 views

WordPress plugin Premmerce User Roles 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.9CVSS5.9AI score0.00166EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.12 views

PT-2025-44266

Name of the Vulnerable Software and Affected Versions Premmerce Product Search for WooCommerce versions through 2.2.4 Description The software contains a Cross-Site Request Forgery CSRF issue. A Cross-Site Request Forgery attack allows an attacker to perform actions on behalf of an authenticated...

4.3CVSS6.5AI score0.00117EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.9 views

PT-2025-44262

Name of the Vulnerable Software and Affected Versions Premmerce Wholesale Pricing for WooCommerce versions through 1.1.10 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue impacts Premmerc...

5.4CVSS6.6AI score0.00197EPSS
Exploits0References4
Rows per page
Query Builder