Extension WordPress
Vulnérabilités WishSuite – Wishlist for WooCommerce
Cette page rassemble les failles publiées pour WishSuite – Wishlist for WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WishSuite – Wishlist for WooCommerce
5 fiches
WishSuite <= 1.5.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute
The WishSuite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button_text' parameter of the 'wishsuite_button' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping. This makes it…
*-1.5.1
1.5.2
20/12/2025
WishSuite <= 1.4.4 – Authenticated (Contributor+) Local File Inclusion
The WishSuite plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.4.4. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the…
*-1.4.4
1.4.5
27/03/2025
WishSuite <= 1.3.7 – Authenticated (Contributor+) Stored Cross-Site Scripting
The WishSuite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-1.3.7
1.3.8
25/03/2024
WishSuite <= 1.3.4 – Authenticated (Administrator+) Stored Cross-Site Scripting
The WishSuite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level…
*-1.3.4
1.3.5
18/05/2023
WishSuite <= 1.3.3 – Cross-Site Request Forgery via plugin_activation()
The WishSuite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.3. This is due to missing or incorrect nonce validation on the plugin_activation() function. This makes it possible for unauthenticated attackers…
*-1.3.3
1.3.4
30/03/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.