Vulnerabilities

TI-2024-12733 CVE-2024-13694 · GHSA-pf3q-2qv4-vx44

WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function

MEDIUM 40

The WooCommerce Wishlist (High customization, fast setup,Free Elementor Wishlist, most features) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00601 Published 2025-01-30 No fix listed CWE-285

TI-2024-23106 CVE-2024-34819 · GHSA-r7w3-w9rh-567f

WordPress MC Woocommerce Wishlist plugin <= 1.7.2 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00408 Published 2024-06-11 No fix listed CWE-862

Vulnerabilities

Filters

WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function

WordPress MC Woocommerce Wishlist plugin <= 1.7.2 - Broken Access Control vulnerability