CVE-2022-1465

The CVE-2022-1465 entry concerns the WordPress WPC Smart Wishlist for WooCommerce plugin. Affected software: WordPress plugin WPC Smart Wishlist for WooCommerce (versions before 2.9.9). Root cause: failure to sanitize/escape a parameter before outputting it back in an attribute via an AJAX action...

CVE-2022-0397

The CVE-2022-0397 entry concerns the WordPress plugin WPC Smart Wishlist for WooCommerce (versions prior to 2.9.4). The issue is a lack of sanitisation/escaping of the key parameter in the wishlist_quickview AJAX response, which can lead to a Reflected Cross‑Site Scripting vulnerability accessibl...

CVE-2023-34386

CVE-2023-34386 is a CSRF vulnerability in the WPC Smart Wishlist for WooCommerce plugin (WordPress). Affected versions are