4 matches found
CVE-2022-0412
CVE-2022-0412 affects the TI WooCommerce Wishlist WordPress plugin (and TI WooCommerce Wishlist Pro) prior to version 1.40.1. The vulnerability arises because the plugin fails to sanitize and escape the item_id parameter before using it in a SQL statement within the wishlist/remove_product REST e...
CVE-2024-43917
CVE-2024-43917 affects WordPress TI WooCommerce Wishlist plugin versions n/a through 2.8.2 and is a SQL Injection vulnerability. Affected component is the TI WooCommerce Wishlist plugin for WordPress; root cause is improper neutralization of SQL elements, enabling unauthenticated SQL queries. Exp...
CVE-2024-9156
CVE-2024-9156 affects the TI WooCommerce Wishlist WordPress plugin (<= 2.8.2 per NVD;
CVE-2020-36725
The CVE-2020-36725 entry concerns the TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress. Affected components are the plugin code handling options via the file ti-woocommerce-wishlist/includes/export.class.php, with vulnerable versions up to 1.21.11 (Wishlist) and up to...