Login Request a demo
WF
Product
Wishlist for WooCommerce
by WPFactory · last CVE Jan 6, 2026
5
CVEs
0
On KEV
7.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities5Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wishlist for WooCommerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-56228
7.1
0%
Dec 31
WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 3.1.2
CVE-2025-69334
6.5
0%
Jan 6
WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.3.0
CVE-2025-49319
6.5
0%
Jul 16
WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability
Affected: through 3.2.3
CVE-2024-13774
6.5
0%
Mar 8
The Wishlist for WooCommerce: Multi Wishlists Per Customer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.7
Affected: before 3.1.8
CVE-2024-10519
6.1
1%
Nov 23
The Wishlist for WooCommerce: Multi Wishlists Per Customer PRO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wtab' parameter in versions 3.0.8 to…
Affected: 3.0.8 before 3.1.3
Showing 5