CVE-2025-32618

creationtimestamp| type| source ---|---|--- 2025-04-11 08:50:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11401 2025-04-11 11:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114319171206242015...

CVE-2025-32618 WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PickPlugins Wishlist wishlist allows SQL Injection.This issue affects Wishlist: from n/a through = 1.0.46...

CVE-2025-32618

CVE-2025-32618 affects the Wishlist WordPress plugin. An authenticated (Subscriber+) SQL Injection exists due to improper input handling in Wishlist, affecting versions up to 1.0.44 (per Wordfence; initial doc cites 1.0.43). CVSS v3.1 base score 8.5 (HIGH). Remediation: update Wishlist to a patch...