WordPress TI WooCommerce Wishlist plugin SQL injection vulnerability

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers.A SQL injection vulnerability exists in versions of the WordPress TI WooCommerce Wishlist plugin prior to 1.40.1, which stems from the plugin’s failure to clean up and escape the item_id parameter before using it in SQL statements via the wishlist/remove_product REST endpoint. Failure to clean up and escape the item_id parameter before using it in a SQL statement can be exploited by an unauthenticated attacker to execute illegal SQL commands to steal sensitive database data.