Premmerce Redirect Manager

Premmerce Redirect Manager has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 4.7, and the most serious one scores 6.3 out of 10. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 5 issues recorded for Premmerce Redirect Manager has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by Rio Darmawan. Premmerce Redirect Manager is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

4.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Premmerce Redirect Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.3CVE-2022-4974

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Read the full analysis

Vulnerability Records

5 records


2026-03-20 00:00	Premmerce Redirect Manager <= 1.0.12 - Missing Authorization Premmerce Redirect Manager <= 1.0.12	`CVE-2026-32541`	4.3 Medium	Que Thanh Tuan	Yes
2023-11-13 00:00	Premmerce Redirect Manager <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting Premmerce Redirect Manager < 1.0.12	`N/A`	4.4 Medium	Anonymous	Yes
2023-03-30 00:00	Premmerce Redirect Manager <= 1.0.10 - Cross-Site Request Forgery via deleteRedirect() Premmerce Redirect Manager <= 1.0.10	`CVE-2023-23787`	4.3 Medium	Rio Darmawan	Yes
2023-03-30 00:00	Premmerce Redirect Manager <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting Premmerce Redirect Manager <= 1.0.9	`CVE-2023-23789`	4.4 Medium	Rio Darmawan	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Premmerce Redirect Manager < 1.0.7	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–5 of 5 reports

Latestv1.0.14

Premmerce Redirect Manager

Author

Premmerce

5.0(2)

100/100

Last Updated

2026-06-25 (3mo ago)

Active Installs

500+

Downloads

16,884

Requires WP

4.8+

Requires PHP

5.6+

Tested up to

WP 7.0.4

Created

2018-01-11 (9y ago)

The Premmerce Redirect Manager enables you to create 301 and 302 redirects and to set up the automatic redirects for the deleted products in the WooCommerce store. This is the main Premmerce plugin for the redirect management and it focuses on the improvement of your store’s SEO, usability and navigation. At the moment we are working on the tools needed for migration from other platforms to WooCommerce and the Redirect Manager would ensure the seamless flow of this process. We make sure your store doesn’t lose its position in the search engine. Full documentation is available here: Premmerce Redirect Manager Major features in “Premmerce Redirect Manager” adding 301 redirects adding 302 redirects setting up automatic redirects for products a convenient interface for adding and editing redirects Demo You can create your personal demo store and test this plugin together with Premmerce Premium and all other Premmerce plugins and themes developed by our team here: Premmerce WooCommerce Demo. Compatibility with other Plugins WooCommerce WooCommerce Multilingual WPML

View on WordPress.org