CSRF Vulnerability in Premmerce Product Search for WooCommerce by Premmerce
CVE-2025-64290

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Premmerce Product Search For WooCommerce
Vendor
CVE Published:
29 October 2025

What is CVE-2025-64290?

A Cross-Site Request Forgery (CSRF) vulnerability exists in Premmerce Product Search for WooCommerce, enabling attackers to execute unauthorized actions on behalf of authenticated users. This vulnerability impacts versions up to 2.2.4, allowing malicious requests to compromise user accounts and affect site functionality. Site owners using the affected plugin should implement security measures to mitigate this risk.

Affected Version(s)

Premmerce Product Search for WooCommerce <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/prem...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan | Patchstack Bug Bounty Program
JSON
.