Extension WordPress
Vulnérabilités Wishlist for WooCommerce: Multi Wishlists Per Customer
Cette page rassemble les failles publiées pour Wishlist for WooCommerce: Multi Wishlists Per Customer, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Wishlist for WooCommerce: Multi Wishlists Per Customer
5 fiches
Wishlist for WooCommerce <= 3.3.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Wishlist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
*-3.3.0
3.3.1
30/12/2025
Wishlist for WooCommerce <= 3.2.3 – Missing Authorization
The Wishlist for WooCommerce: Multi Wishlists Per Customer plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.2.3. This makes it possible for…
*-3.2.3
3.2.4
10/07/2025
Wishlist for WooCommerce <= 3.2.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Wishlist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
*-3.2.2
3.2.3
19/05/2025
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 – Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name
The Wishlist for WooCommerce: Multi Wishlists Per Customer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.7. This is due to missing or incorrect nonce validation on the 'save_to_multiple_wishlist' function.…
*-3.1.7
3.1.8
07/03/2025
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.2 – Reflected Cross-Site Scripting
The Wishlist for WooCommerce: Multi Wishlists Per Customer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-3.1.2
3.1.3
19/12/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.