Templateinvaders Ti Woocommerce Wishlist

9 CVEs affecting Templateinvaders Ti Woocommerce Wishlist. Latest disclosed: 2025-12-16. Critical: 2, High: 2.

Top CVEs affecting Templateinvaders Ti Woocommerce Wishlist
CVESeverityScorePublishedSummary
CVE-2025-47577Critical10.02025-05-19Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Upload a Web Shell to…
CVE-2024-43917Critical9.32024-08-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injec…
CVE-2020-36725High8.82023-06-07The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vulnerability in versions up to, and incl…
CVE-2024-10567High7.52024-12-04The TI WooCommerce Wishlist plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wizard' function…
CVE-2025-32920Medium6.52025-05-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-w…
CVE-2025-67929Medium5.32025-12-16Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control…
CVE-2025-9207Medium5.32025-12-13The TI WooCommerce Wishlist plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.10.0. This is due to the plugin accept…
CVE-2025-58247Medium5.32025-09-22Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control…
CVE-2022-04122022-02-28The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id p…