Premmerce Wishlist for WooCommerce

Premmerce Wishlist for WooCommerce has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (50%). Other recurring categories include Cross-Site Scripting, PHP Remote File Inclusion.

Every one of the 6 issues recorded for Premmerce Wishlist for WooCommerce has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. Premmerce Wishlist for WooCommerce is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh

7.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Premmerce Wishlist for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update

Read the full analysis

Vulnerability Records

6 records


2026-06-18 00:00	Premmerce Wishlist for WooCommerce <= 1.1.11 - Unauthenticated SQL Injection Premmerce Wishlist for WooCommerce <= 1.1.11	`CVE-2026-54849`	7.5 High	hhhai	Yes
2025-12-11 15:05	Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletion Premmerce Wishlist for WooCommerce <= 1.1.10	`CVE-2025-13440`	5.3 Medium	Legion Hunter	Yes
2025-07-28 00:00	Premmerce Wishlist for WooCommerce <= 1.1.10 - Unauthenticated Local File Inclusion Premmerce Wishlist for WooCommerce <= 1.1.10	`CVE-2025-60191`	8.1 High	LVT-tholv2k	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Premmerce Wishlist for WooCommerce 1.0 – 1.1.9	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Premmerce Wishlist for WooCommerce < 1.1.8	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes
2019-02-25 00:00	Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update Premmerce Wishlist for WooCommerce < 1.1.3	`N/A`	8.8 High	Anonymous	Yes

Showing 1–6 of 6 reports

Latestv1.1.13

Premmerce Wishlist for WooCommerce

Author

Premmerce

3.7(3)

74/100

Last Updated

2026-06-25 (3mo ago)

Active Installs

100+

Downloads

24,003

Requires WP

4.8+

Requires PHP

5.6+

Tested up to

WP 7.0.4

Created

2018-01-16 (9y ago)

A wishlist is a tool that will allow your customers to choose products for future purchases and to share their wishes with close people. Using wishlists you can review customers’ wishes and make favorable offers and promotions based on collected information. Full documentation is available here: Premmerce Wishlist for WooCommerce Major features in “Premmerce Wishlist for WooCommerce” Creating your own wishlists The possibility to share a wishlist using the URL The possibility to review customers’ wishlists in the dashboard Displaying a widget with wishlists Demo You can see how it works on the Storefront theme here: https://storefront.premmerce.com/messenger-bag-eshow/ . You can see how it works on the SalesZone theme here: https://saleszone.premmerce.com/apple-iphone-64gb-x/ . Plus, you can create your personal demo store and test this plugin together with Premmerce Premium and all other Premmerce plugins and themes developed by our team here: Premmerce WooCommerce Demo. Compatibility with other Plugins WooCommerce WooCommerce Multilingual WPML Installation Unzip the downloaded zip file. Upload the plugin folder into the wp-content/plugins/ directory of your WordPress site. Activate Premmerce Wishlist for WooCommerce from the Plugins page

View on WordPress.org