CVE-2025-47577

CVE-2025-47577 - WordPress TI WooCommerce Wishlist para ver la ruta de la imagen subida 💾 Guarda las URL de imágenes subidas válidas en result.txt 💾 Guarda las URL de wishlis...

TI WooCommerce Wishlist <= 2.9.2 - Arbitrary File Upload

TemplateInvaders TI WooCommerce Wishlist = 2.10.0 contains an unrestricted file upload vulnerability caused by lack of proper file type validation, letting attackers upload web shells to the server, exploit requires no special privileges. id: CVE-2025-47577 info: name: TI WooCommerce Wishlist =...

WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection

WordPress TI WooCommerce Wishlist plugin before 1.40.1 contains a SQL injection vulnerability. The plugin does not sanitize and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint. id: CVE-2022-0412 info: name: WordPress TI WooCommerce...

CVE-2025-47577

CVE-2025-47577 针对 CVE-2025-47577 开发的概念验证代码。基于 PatchStack 的 文章。 使用方法 usage: python CVE-2025-47577.py --help TI WooCommerce Wishlist WordPress plugin = 2.9.2 CVE-2025-47577 PoC positional arguments: FILE local file to upload URLPATH base path of the wish list PRODUCTID ID of the product to add...

CVE-2024-43917

CVE-2024-43917 一个概念验证，用于利用 CVE-2024-43917。基于 PatchStack 的文章。 使用方法 usage: python CVE-2024-43917.py --help TI WooCommerce Wishlist WordPress plugin = 2.8.2 CVE-2024-43917 PoC positional arguments: COMMAND SQL command to execute SHAREKEY share key of the wish list optional arguments: -h, --help show...

CVE-2024-43917

CVE-2024-43917 Este script demuestra una vulnerabilidad de inyección SQL encontrada en el plugin TI WooCommerce Wishlist para WordPress, en versiones hasta la 2.8.2 CVE-2024-43917. La vulnerabilidad permite a usuarios no autenticados ejecutar comandos SQL arbitrarios en la base de datos del sitio...

CVE-2026-66631

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

EUVD-2026-81511

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

CVE-2026-66631

CVE-2026-66631 affects the MC Woocommerce Wishlist WordPress plugin (plugin slug: smart-wishlist-for-more-convert ) in versions

CVE-2026-66631 WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

CVE-2026-66631 WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MC Woocommerce Wishlist versions = 1.9.21...

CVE-2026-66631: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

PT-2026-94277

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

VulnCheck KEV: CVE-2022-0412

The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint, allowing unauthenticated attackers to perform SQL...

CVE-2026-82305

The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site...

CVE-2026-82305 YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title

The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site...

CVE-2026-82305

The YITH WooCommerce Wishlist WordPress plugin (versions before 4.18.1 ) contains an authorization bypass vulnerability. The flaw exists because the plugin fails to verify if a user is authorized to rename a wishlist, specifically via the change_wishlist_title functionality. This allows unauthent...

CVE-2026-82305 YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title

The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site...

EUVD-2026-75965

The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site...