Plugin icon

YITH WooCommerce Wishlist

yith-woocommerce-wishlist

Vulnerabilities:

7

Last Updated:

January 26, 2026

Active Installs:

500000

Published
Title
Fixed in
CVSS
Published
2025-11-18
Title
YITH WooCommerce Wishlist < 4.10.1 - Unauthenticated Wishlist Rename via IDOR
Fixed in
Fixed in 4.10.1
CVSS
5.3 (medium)
Published
2025-11-18
Title
YITH WooCommerce Wishlist < 4.10.1 - Wishlist Item Deletion via Wishlist Token Disclosure
Fixed in
Fixed in 4.10.1
CVSS
5.3 (medium)
Published
2025-06-13
Title
YITH WooCommerce Wishlist < 4.6.0 - Contributor+ Stored XSS via id Parameter
Fixed in
Fixed in 4.6.0
CVSS
5.9 (medium)
Published
2024-05-30
Title
YITH WooCommerce Wishlist < 3.33.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.33.0
CVSS
4.4 (medium)
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Fixed in
Fixed in 3.15.0
CVSS
4.3 (medium)
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Fixed in
Fixed in 2.2.14
CVSS
4.3 (medium)
Published
2018-01-16
Title
YITH WooCommerce Wishlist < 2.2.0 - Authenticated SQL Injection
Fixed in
Fixed in 2.2.0
CVSS
n/a