Read the docs

templateinvaders

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

templateinvaders records in CISA KEV

No templateinvaders vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ti Woocommerce Wishlist 4 records HIGH

Records

4 records in Ti Woocommerce Wishlist · all components

TI-2022-00337 CVE-2022-0412 · GHSA-h2g7-6p9r-jg23

TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection

Priority HIGH 80

The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before using it in a SQL statement via the wishlist/…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.73998 Published 2022-02-28 Fixed in 1.40.1 CWE-89
TI-2024-29506 CVE-2024-43917 · GHSA-cfvh-qp4v-2hqc

WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability

Priority HIGH 68

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a thr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22955 Published 2024-08-29 No fix listed CWE-89
TI-2020-18896 CVE-2020-36725 · GHSA-whv7-rqpj-pc9p

TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update

Priority MEDIUM 42

The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vulnerability in versions up to, and including, 1.21.11 and 1.21.4 via the 'ti-woocommerce-wishlist/in…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01138 Published 2023-06-07 No fix listed CWE-862
Open these records in search →