Woocommerce Wishlist vulnerabilities
We track 1 vulnerability in Woocommerce Wishlist products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Woocommerce Wishlist vulnerabilities
- 9.1 Critical severity
Woocommerce Wishlist: Missing Authorization
The Woocommerce Wishlist WordPress plugin through 1.1.0 does not have authorisation and CSRF checks in one of its unauthenticated AJAX actions, allowing unauthenticated users to overwrite any site option with the URL of an uploaded image or an empty value, bre