CVE-2026-54849

CriticalCVSS 9.3

Published: 25/06/2026(UTC)Updated: 25/06/2026(UTC)Translated: 26/06/2026(UTC)NVD NIST

Summary

The Premmerce Wishlist plugin for WooCommerce versions up to 1.1.11 contains a vulnerability to unauthenticated SQL injection.

An attacker could exploit this vulnerability to gain access to sensitive data in the database, potentially leading to serious security breaches.

It is recommended to update the plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions.