MoreConvert

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

MoreConvert records in CISA KEV

No MoreConvert vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woocommerce Wishlist 2 records MEDIUM

Records

3 records

TI-2026-05019 CVE-2026-5722 · GHSA-m5qv-996f-g5rh

MoreConvert Pro <= 1.9.14 - Authentication Bypass via Waitlist Guest Verification Token Reuse

MEDIUM 49

The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2026-05-05 No fix listed CWE-287

TI-2024-12733 CVE-2024-13694 · GHSA-pf3q-2qv4-vx44

WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function

MEDIUM 40

The WooCommerce Wishlist (High customization, fast setup,Free Elementor Wishlist, most features) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00601 Published 2025-01-30 No fix listed CWE-285

TI-2024-23106 CVE-2024-34819 · GHSA-r7w3-w9rh-567f

WordPress MC Woocommerce Wishlist plugin <= 1.7.2 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00408 Published 2024-06-11 No fix listed CWE-862

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0