Medium
CVE-2025-32920
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 115
Reset filters
High
CVE-2025-47657
Productive Commerce <= 1.1.22 - Unauthenticated SQL Injection
High
CVE-2025-22279
JetCompareWishlist <= 1.5.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32618
Wishlist <= 1.0.44 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32272
Wishlist <= 1.0.44 - Cross-Site Request Forgery
Medium
CVE-2025-30798
Better WishList API <= 1.1.4 - Reflected Cross-Site Scripting
High
CVE-2025-30820
WishSuite <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-30879
MC Woocommerce Wishlist <= 1.8.9 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-13824
CiyaShop - Multipurpose WooCommerce Theme <= 4.19.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-13774
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name
Medium
CVE-2024-12809
Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13559
TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-26915
Wishlist <= 1.0.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13718
Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later <= 1.2.26 - Cross-Site Request Forgery to Wishlist Creation/Modification
High
CVE-2024-13694
WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function
High
CVE-2024-13696
Flexible Wishlist for WooCommerce <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter
Medium
CVE-2025-24657
Wishlist for WooCommerce <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24655
Wishlist <= 1.0.39 - Reflected Cross-Site Scripting
High
CVE-2025-24641
Better WishList API <= 1.1.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22505
NC Wishlist for Woocommerce <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-56228
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.2 - Reflected Cross-Site Scripting
High
CVE-2024-10567
TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access
Medium
CVE-2024-10519
Wishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab Parameter
High
CVE-2024-9156
TI WooCommerce Wishlist <= 2.9.0 - Unauthenticated SQL Injection via 'lang'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.