Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: templateinvaders Component: Ti Woocommerce Wishlist Clear all filters
TI-2024-29506 CVE-2024-43917 · GHSA-cfvh-qp4v-2hqc

WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability

Priority HIGH 68

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a thr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22955 Published 2024-08-29 No fix listed CWE-89
TI-2020-18896 CVE-2020-36725 · GHSA-whv7-rqpj-pc9p

TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update

Priority MEDIUM 42

The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vulnerability in versions up to, and including, 1.21.11 and 1.21.4 via the 'ti-woocommerce-wishlist/in…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01138 Published 2023-06-07 No fix listed CWE-862
TI-2022-00337 CVE-2022-0412 · GHSA-h2g7-6p9r-jg23

TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection

Priority HIGH 80

The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before using it in a SQL statement via the wishlist/…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.73998 Published 2022-02-28 Fixed in 1.40.1 CWE-89