CVE-2025-69334

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Stored XSS.This issue affects Wishlist for WooCommerce: from n/a through = 3.3.0...

CVE-2025-69334

CVE-2025-69334 affects Wishlist for WooCommerce: Multi Wishlists Per Customer. The WordPress plugin suffers a Stored XSS due to improper neutralization during web page generation, potentially affecting Wishlist for WooCommerce versions 1 through

WordPress plugin Wishlist for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Wishlist for WooCommerce versions = 3.3.0...

CVE-2025-49319

CVE-2025-49319 refers to a Missing Authorization (Broken Access Control) vulnerability in the Wishlist for WooCommerce plugin. Public sources indicate it affects Wishlist for WooCommerce versions up to and including 3.2.3, due to incorrectly configured access control security levels that enable u...

CVE-2025-49319 WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wishlist for WooCommerce: from n/a through = 3.2.3...

CVE-2025-49319 WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPFactory Wishlist for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Wishlist for WooCommerce: from n/a through 3.2.3...

WordPress plugin Wishlist for WooCommerce 安全漏洞

WordPress Wishlist for WooCommerce is a feature module for e-commerce websites that allows users to add items to a wishlist or favorites for subsequent purchases. WordPress Wishlist for WooCommerce suffers from a missing authorization vulnerability, no details of the vulnerability are provided at...

CVE-2025-48237

CVE-2025-48237 is a Stored Cross-Site Scripting (XSS) vulnerability in the Wishlist for WooCommerce plugin for WordPress, affecting versions up to 3.2.2 (and possibly earlier). The issue arises from improper input neutralization during web page generation, enabling stored XSS. CVSS v3.1 base scor...

CVE-2025-48237 WordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Stored XSS.This issue affects Wishlist for WooCommerce: from n/a through = 3.2.2...

WordPress plugin Wishlist for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2024-13774 Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name

The Wishlist for WooCommerce: Multi Wishlists Per Customer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.7. This is due to missing or incorrect nonce validation on the 'savetomultiplewishlist' function. This makes it possible for...

CVE-2025-24657

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee Wishlist for WooCommerce wt-woocommerce-wishlist allows Stored XSS.This issue affects Wishlist for WooCommerce: from n/a through = 2.1.2...

CVE-2025-24657 WordPress Wishlist for WooCommerce plugin <=2.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee Wishlist for WooCommerce allows Stored XSS. This issue affects Wishlist for WooCommerce: from n/a through 2.1.2...

CVE-2025-24657

CVE-2025-24657 is a Cross-Site Scripting (XSS) vulnerability in WebToffee Wishlist for WooCommerce stemming from improper input neutralization during Web Page Generation. Affects Wishlist for WooCommerce versions up to 2.1.2 (per NVD/Red Hat entries) with CVSSv3.1 metrics: AV:N/AC:L/PR:H/UI:R/S:C...

CVE-2025-24657 WordPress Wishlist for WooCommerce plugin <=2.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee Wishlist for WooCommerce wt-woocommerce-wishlist allows Stored XSS.This issue affects Wishlist for WooCommerce: from n/a through = 2.1.2...

WordPress Wishlist for WooCommerce plugin <=2.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by b4orvn in WordPress Plugin Wishlist for WooCommerce versions = 2.1.2...

WordPress plugin Wishlist for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2025-22505

CVE-2025-22505 affects NC Wishlist for Woocommerce (WordPress) ≤ 1.0.1. The vulnerability is an SQL Injection caused by improper neutralization of special elements in an SQL command, enabling an attacker to exfiltrate data or escalate access without user interaction. According to the provided met...

CVE-2024-56228 WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce: Multi Wishlists Per Customer allows Reflected XSS.This issue affects Wishlist for WooCommerce: Multi Wishlists Per Customer: from n/a through 3.1.2...