CVE-2026-54849: WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability
Published Jun 25, 2026
·Updated
Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions.
Affected Software
1 affected component
Premmerce Wishlist for WooCommerce<=1.1.11
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Premmerce Wishlist for WooCommerce Pluginto a version that resolves this vulnerability.Fixed in 1.1.12
Event History
Jun 25, 2026
CVE Published
via MITRE·01:12 PM
Data Sourced
via MITRE·01:12 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-54849?
CVE-2026-54849 has a critical severity rating of 9.3.
2
How do I fix CVE-2026-54849?
To fix CVE-2026-54849, update the Premmerce Wishlist for WooCommerce plugin to version 1.1.12 or later.
3
What type of vulnerability is CVE-2026-54849?
CVE-2026-54849 is an unauthenticated SQL Injection vulnerability.
4
Which versions of the plugin are affected by CVE-2026-54849?
Versions of the Premmerce Wishlist for WooCommerce plugin up to and including 1.1.11 are affected by CVE-2026-54849.
5
What impacts can CVE-2026-54849 have?
CVE-2026-54849 can allow attackers to execute unauthorized SQL queries, potentially leading to data exposure.