Vulnerability in Yith Woocommerce Wishlist

CVE-2026-4432

The YITH WooCommerce Wishlist WordPress plugin before 4.13.0 does not properly validate wishlist ownership in the save_title() AJAX handler before allowing wishlist renaming operations. The function only checks for a valid nonce, which is…

EPSS: 0.001 (21.2th percentile) — read the EPSS interpretation.

Affected products

  • Unknown Yith Woocommerce Wishlist — versions 0

References