TI WooCommerce Wishlist <= 2.9.2 - Arbitrary File Upload

TemplateInvaders TI WooCommerce Wishlist = 2.10.0 contains an unrestricted file upload vulnerability caused by lack of proper file type validation, letting attackers upload web shells to the server, exploit requires no special privileges. id: CVE-2025-47577 info: name: TI WooCommerce Wishlist =...

WordPress TI WooCommerce Wishlist Plugin <= 2.8.2 - SQL Injection

In the latest version 2.8.2 as of writing the article and below, the plugin is vulnerable to a SQL injection vulnerability that allows any users to execute arbitrary SQL queries in the database of the WordPress site. No privileges are required to exploit the issue. The vulnerability is unpatched ...

CVE-2025-47577

CVE-2025-47577 - WordPress TI WooCommerce Wishlist でアップロードされた画像パスを確認 💾 有効なアップロード画像URLを result.txt に保存 💾 有効なウィッシュリストURLを resultwishlist.txt に保存 🧠 研究者 クレジット: Patchstack Database 🚀 使い方 1. list.txt ファイルに対象ドメインのリストを準備します（1行に1ドメイン、http なし）。 2. アップロードするファイル（例：hinata.jpg）を同じフォルダに配置します。 3. スクリプトを実行します：...

CVE-2022-31101

CVE-2022-31101 PrestaShop bockwishlist モジュール 2.1.0 SQLi CVE-2022-31101 用エクスプロイト 使用方法 python3 cve-2022-31101.py プロンプトが表示されたら、ウィッシュリストの URL を入力します。URL の例: http://example.com/module/blockwishlist/view?idwishlist=1 プロンプトが表示されたら、アカウントの Cookie を入力します。 これで Web サイトへの攻撃が開始されます。 実行例 注意...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

CVE-2026-89236

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

CVE-2026-89236 SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

CVE-2026-89236

The SaveTo Wishlist Lite WordPress plugin, in versions prior to 1.1.5 , is vulnerable to SQL Injection . The root cause is the failure to sanitize and escape parameters used within the ORDER BY clause of a SQL query, specifically through the 'sort_column' and 'sort_order' parameters. This allows ...

EUVD-2026-91943

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

CVE-2026-89236 SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

CVE-2024-43917

CVE-2024-43917 CVE-2024-43917を悪用するために開発された概念実証です。PatchStackの記事に基づいています。 使い方 usage: python CVE-2024-43917.py --help TI WooCommerce Wishlist WordPress plugin = 2.8.2 CVE-2024-43917 PoC positional arguments: COMMAND SQL command to execute SHAREKEY share key of the wish list optional arguments: -h,...

WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection

WordPress TI WooCommerce Wishlist plugin before 1.40.1 contains a SQL injection vulnerability. The plugin does not sanitize and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint. id: CVE-2022-0412 info: name: WordPress TI WooCommerce...

CVE-2026-97273

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

CVE-2026-97268

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

CVE-2026-97273 WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

CVE-2026-97273

The Premmerce Wishlist for WooCommerce plugin (versions

EUVD-2026-90837

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

EUVD-2026-90835

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

CVE-2026-97268

The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability in versions

CVE-2026-97268 WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...