CVE-2026-124763

The Woocommerce Wishlist WordPress plugin versions through 1.1.0 is vulnerable to an unauthenticated AJAX action that lacks proper authorisation and CSRF checks . An attacker can exploit this to overwrite any site option with an empty value or an uploaded image URL. This could result in site brea...