TI WooCommerce Wishlist <= 2.9.2 - Arbitrary File Upload

TemplateInvaders TI WooCommerce Wishlist = 2.10.0 contains an unrestricted file upload vulnerability caused by lack of proper file type validation, letting attackers upload web shells to the server, exploit requires no special privileges. id: CVE-2025-47577 info: name: TI WooCommerce Wishlist =...

WordPress TI WooCommerce Wishlist Plugin <= 2.8.2 - SQL Injection

In the latest version 2.8.2 as of writing the article and below, the plugin is vulnerable to a SQL injection vulnerability that allows any users to execute arbitrary SQL queries in the database of the WordPress site. No privileges are required to exploit the issue. The vulnerability is unpatched ...

CVE-2025-47577

CVE-2025-47577 - WordPress TI WooCommerce Wishlist 를 검사합니다 💾 유효한 업로드 이미지 URL을 result.txt에 저장합니다 💾 유효한 위시리스트 URL을 resultwishlist.txt에 저장합니다 🧠 연구자 출처: Patchstack Database 🚀 사용법 1. 대상 도메인 목록이 포함된 list.txt 파일을 준비합니다한 줄에 하나씩, http 제외. 2. 업로드할 파일예: hinata.jpg을 같은 폴더에 넣습니다. 3. 스크립트를 실행합니다: python3...

CVE-2022-31101

CVE-2022-31101 PrestaShop bockwishlist 모듈 2.1.0 SQLiCVE-2022-31101용 익스플로잇 사용법 python3 cve-2022-31101.py 프롬프트가 표시되면 위시리스트의 URL을 입력합니다. URL 예시: http://example.com/module/blockwishlist/view?idwishlist=1 프롬프트가 표시되면 계정의 쿠키를 입력합니다. 이제 웹사이트 공격이 시작됩니다. 실행 화면 참고 이 익스플로잇은 데이터베이스의 테이블 이름 접두사가 ps라고 가정합니다. 이는...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

CVE-2026-89236

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

CVE-2026-89236 SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

EUVD-2026-91943

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

CVE-2026-89236

The SaveTo Wishlist Lite WordPress plugin, in versions prior to 1.1.5 , is vulnerable to SQL Injection . The root cause is the failure to sanitize and escape parameters used within the ORDER BY clause of a SQL query, specifically through the 'sort_column' and 'sort_order' parameters. This allows ...

CVE-2026-89236 SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

CVE-2024-43917

CVE-2024-43917 CVE-2024-43917을 악용하기 위해 개발된 개념 증명PoC입니다. PatchStack의 기사를 기반으로 합니다. 사용법 usage: python CVE-2024-43917.py --help TI WooCommerce Wishlist WordPress plugin = 2.8.2 CVE-2024-43917 PoC positional arguments: COMMAND SQL command to execute SHAREKEY share key of the wish list optional...

WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection

WordPress TI WooCommerce Wishlist plugin before 1.40.1 contains a SQL injection vulnerability. The plugin does not sanitize and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint. id: CVE-2022-0412 info: name: WordPress TI WooCommerce...

CVE-2026-97273

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

CVE-2026-97268

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

CVE-2026-97273 WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

CVE-2026-97273

The Premmerce Wishlist for WooCommerce plugin (versions

EUVD-2026-90837

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

EUVD-2026-90835

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...

CVE-2026-97268

The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability in versions

CVE-2026-97268 WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Premmerce Wishlist for WooCommerce = 1.1.13 versions...