TW
Product
TI WooCommerce Wishlist
10
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 4Low 0
Watch
Add TI WooCommerce Wishlist to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-47577 | 10.0 | May 19 | WordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload Vulnerability Affected: through 2.9.2 |
| CVE-2024-43917 | 9.8 | Aug 29 | WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability Affected: through 2.8.2 |
| CVE-2022-0412 | 9.8 | Feb 28 | The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before… Affected: before 1.40.1; before 1.40.1 |
| CVE-2020-36725 | 8.1 | Jun 7 | TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update Affected: through 1.21.11 |
| CVE-2024-10567 | 7.5 | Dec 4 | TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access Affected: through 2.9.1 |
| CVE-2024-9156 | 7.5 | Oct 10 | TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection via lang parameters Affected: through 2.8.2 |
| CVE-2025-32920 | 6.5 | May 19 | WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Cross Site Scripting (XSS) vulnerability Affected: through 2.10.0 |
| CVE-2025-67929 | 5.3 | Dec 16 | WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability Affected: through 2.10.0 |
| CVE-2025-9207 | 5.3 | Dec 13 | TI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injection Affected: through 2.10.0 |
| CVE-2025-58247 | 5.3 | Sep 22 | WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability Affected: through 2.10.0 |
Showing 10
