WordPress Plugin Vulnerabilities

TI WooCommerce Wishlist < 2.0.7 - Unauthenticated SQLi via tinv_wishlistkey Cookie

Description

The plugin does not sanitise and escape user input before using it in a SQL statement in a front-end endpoint, allowing unauthenticated users to perform SQL injection attacks.

Proof of Concept

Affects Plugins

Plugin icon
ti-woocommerce-wishlist
Fixed in 2.0.7

References

CVE
CVE-2026-124647

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
8.6 (high)

Miscellaneous

Original Researcher
Seid Yassin Ali
Submitter
Seid Yassin Ali
Submitter website
https://www.tertir.com
Verified
Yes
WPVDB ID
d0119edb-2845-4106-a2bf-0ef28949ae32

Timeline

Publicly Published
2026-11-10 (about 2 days ago)
Added
2026-11-10 (about 1 day ago)
Last Updated
2026-11-10 (about 1 day ago)

Other

Published
Title
Published
2023-06-23
Title
MStore API < 3.9.8 - Unauthenticated SQL Injection
Published
2014-08-01
Title
Plg Novana - wp-content/plugins/plg_novana/novana_detail.php id Parameter SQL Injection
Published
2024-09-25
Title
Classic Editor and Classic Widgets < 1.4.2 - Authenticated (Subscriber+) SQL Injection
Published
2026-07-29
Title
Improved Save Button <= 1.2.1 - Authenticated (Author+) Second-Order SQL Injection via 'meta_key' Parameter
Published
2025-02-11
Title
Small Package Quotes – UPS Edition < 4.5.17 - Unauthenticated SQL Injection