Medium 5.3
2025-12-12< 1.1.11
CVE-2025-13440
Minimum safe version
1.1.11
Update to 1.1.11 or later to address 9 fixable vulnerabilities
CVE-2025-13440
CVE-2025-60191
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Premmerce Wishlist for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.7 - Sensitive Information Disclosure vulnerability
WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability