Vulnerabilities

TI-2026-05019 CVE-2026-5722 · GHSA-m5qv-996f-g5rh

MoreConvert Pro <= 1.9.14 - Authentication Bypass via Waitlist Guest Verification Token Reuse

MEDIUM 49

The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2026-05-05 No fix listed CWE-287

TI-2024-12733 CVE-2024-13694 · GHSA-pf3q-2qv4-vx44

WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function

MEDIUM 40

The WooCommerce Wishlist (High customization, fast setup,Free Elementor Wishlist, most features) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00601 Published 2025-01-30 No fix listed CWE-285

TI-2024-23106 CVE-2024-34819 · GHSA-r7w3-w9rh-567f

WordPress MC Woocommerce Wishlist plugin <= 1.7.2 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00408 Published 2024-06-11 No fix listed CWE-862

Vulnerabilities

Filters

MoreConvert Pro <= 1.9.14 - Authentication Bypass via Waitlist Guest Verification Token Reuse

WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function

WordPress MC Woocommerce Wishlist plugin <= 1.7.2 - Broken Access Control vulnerability