CVE-2022-0412

The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro WordPress plugins (versions before 1.40.1 ) are vulnerable to an unauthenticated Blind SQL injection attack. The root cause is the failure to sanitize and escape the item_id parameter when used in a SQL statement via the wishlist/remove_...

CVE-2024-43917

The TI WooCommerce Wishlist WordPress plugin (versions ≤ 2.8.2 ) is vulnerable to an unauthenticated SQL injection vulnerability. An attacker can execute arbitrary SQL queries against the website's database without any privileges, potentially leading to the extraction of sensitive information suc...

CVE-2024-9156

CVE-2024-9156 affects the TI WooCommerce Wishlist WordPress plugin (<= 2.8.2 per NVD;

CVE-2020-36725

The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vulnerability in versions up to and including 1.21.11 and 1.21.4 , respectively. The root cause is located in the ti-woocommerce-wishlist/includes/export.class.php file. This flaw...