Wishlist vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WI

Product

Wishlist

by pickplugins · last CVE Jun 6, 2025

6

CVEs

0

On KEV

8.5

Max CVSS

0

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 0High 3Medium 3Low 0

Severity

All severities6 Critical0 High3 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Wishlist to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-32618	8.5	1%	Apr 11	WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability Affected: through 1.0.46
CVE-2025-26915	8.5	0%	Feb 25	WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerability Affected: through 1.0.41
CVE-2025-24655	7.1	0%	Apr 17	WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 1.0.39
CVE-2025-49075	6.5	0%	Jun 6	WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability Affected: through 1.0.43
CVE-2024-12809	6.4	0%	Mar 7	Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.0.43
CVE-2025-32272	4.3	0%	Apr 4	WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 1.0.46