YW
Product
YITH WooCommerce Wishlist
5
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch
Add YITH WooCommerce Wishlist to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5238 | 6.4 | Jun 14 | YITH WooCommerce Wishlist <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter Affected: through 4.5.0 |
| CVE-2024-34385 | 5.9 | Jun 3 | WordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability Affected: through 3.32.0 |
| CVE-2025-12427 | 5.3 | Nov 19 | YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename Affected: through 4.10.0 |
| CVE-2025-12777 | 5.3 | Nov 19 | YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion Affected: through 4.10.0 |
| CVE-2019-16251 | 4.3 | Oct 31 | plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes Affected: through 2.2.13 |
Showing 5