Vulnerabilities

TI-2024-19694 CVE-2024-29927 · GHSA-9h9v-3fff-x4pj

WordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasTheme WishSuite allows Stored XSS.This issue affects WishSuite: from n/a through 1.3.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00336 Published 2024-03-27 No fix listed CWE-79

TI-2023-16150 CVE-2023-32962 · GHSA-c35r-c563-xx7p

WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin <= 1.3.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-30 No fix listed CWE-79

TI-2023-09545 CVE-2023-23731 · GHSA-6v94-wxf8-92qh

WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in HasTheme WishSuite plugin <= 1.3.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-07-11 No fix listed CWE-352

Vulnerabilities

Filters

WordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)