1 matches found
CVE-2025-13440: Missing Authorization
The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.1.10. This is due to a missing capability check on the deleteWishlist function. This makes it possible for authenticated attackers, with Subscriber-level acce...
5.3CVSS5.8AI score0.0034EPSS
SaveExploits0References1
20