Plugin icon

TI WooCommerce Wishlist

ti-woocommerce-wishlist

Vulnerabilities:

11

Last Updated:

November 19, 2025

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-12-12
Title
TI WooCommerce Wishlist < 2.11.0 - Unauthenticated HTML Injection
Fixed in
Fixed in 2.11.0
CVSS
5.3 (medium)
Published
2025-11-21
Title
TI WooCommerce Wishlist < 2.11.0 - Missing Authorization
Fixed in
Fixed in 2.11.0
CVSS
5.3 (medium)
Published
2025-09-22
Title
TI WooCommerce Wishlist < 2.11.0 - Missing Authorization
Fixed in
Fixed in 2.11.0
CVSS
6.5 (medium)
Published
2025-05-16
Title
TI WooCommerce Wishlist < 2.10.0 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 2.10.0
CVSS
9.8 (critical)
Published
2025-05-15
Title
TI WooCommerce Wishlist < 2.10.0 - Contributor+ Stored XSS
Fixed in
Fixed in 2.10.0
CVSS
5.9 (medium)
Published
2024-12-03
Title
TI WooCommerce Wishlist < 2.9.2 - Unauthenticated Plugin Setup Wizard Access
Fixed in
Fixed in 2.9.2
CVSS
7.5 (high)
Published
2024-09-19
Title
TI WooCommerce Wishlist < 2.9.1 - Unauthenticated SQL Injection via lang parameters
Fixed in
Fixed in 2.9.1
CVSS
7.5 (high)
Published
2024-08-22
Title
TI WooCommerce Wishlist < 2.9.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 2.9.0
CVSS
7.5 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.7.0
CVSS
6.1 (medium)
Published
2022-01-31
Title
TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection
Fixed in
Fixed in 1.40.1
CVSS
8.6 (high)
Published
2020-10-16
Title
TI WooCommerce Wishlist - Authenticated WP Options Change
Fixed in
Fixed in 1.21.12
CVSS
8.8 (high)