Advisories · Technology

YITH WooCommerce Wishlist.

Every CVE that names YITH WooCommerce Wishlist among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112199 CVE record

CVSS 6.5 Medium

WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability
- YITH WooCommerce Wishlist
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2026
CVE-2026-82305 CVE record

CVSS 5.3 Medium

YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title
- YITH WooCommerce Wishlist
- Broken access control
Not analysed yet 11 Sept 2026
CVE-2026-27329 CVE record

CVSS 5.3 Medium

WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerability
- YITH WooCommerce Wishlist
- Broken access control
Not analysed yet 7 May 2026
CVE-2026-4432 CVE record

CVSS 6.5 Medium

YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR
- YITH WooCommerce Wishlist
Not analysed yet 10 Apr 2026