CVE-2022-0412

CVE-2022-0412 affects the TI WooCommerce Wishlist WordPress plugin (and TI WooCommerce Wishlist Pro) prior to version 1.40.1. The vulnerability arises because the plugin fails to sanitize and escape the item_id parameter before using it in a SQL statement within the wishlist/remove_product REST e...

CVE-2020-36725

The CVE-2020-36725 entry concerns the TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress. Affected components are the plugin code handling options via the file ti-woocommerce-wishlist/includes/export.class.php, with vulnerable versions up to 1.21.11 (Wishlist) and up to...