Login Request a demo
WF
Product
Wishlist for WooCommerce
by WPFactory · last CVE Jan 6, 2026
6
CVEs
0
On KEV
7.1
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 5Low 0
Severity
All severities6Critical0High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wishlist for WooCommerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-69334
6.5
0%
Jan 6
WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.3.0
CVE-2025-49319
6.5
0%
Jul 16
WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability
Affected: through 3.2.3
CVE-2025-48237
6.5
0%
May 19
WordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability
Affected: through 3.2.2
CVE-2024-13774
6.5
0%
Mar 8
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name
Affected: before 3.1.8
CVE-2024-10519
6.1
1%
Nov 23
The Wishlist for WooCommerce: Multi Wishlists Per Customer PRO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wtab' parameter in versions 3.0.8 to…
Affected: 3.0.8 before 3.1.3
Showing 5