Wishlist vulnerabilities | LiveThreat CVE Feed

Product

Wishlist

by pickplugins · last CVE Jun 6, 2025

CVEs

On KEV

8.5

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 3Low 0

Severity

Exploitation

Watch

Add Wishlist to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-49075	6.5	0%	Jun 6	WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability Affected: through 1.0.43
CVE-2024-12809	6.4	0%	Mar 7	Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.0.43
CVE-2025-32272	4.3	0%	Apr 4	WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 1.0.46