Veille CVE

Recherche « Unknown TI WooCommerce Wishlist »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown TI WooCommerce Wishlist » ✕
  1. CVE-2026-15261 5.3 Moyenne

    Unknown TI WooCommerce Wishlist

    The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not enforce the same owner-only access control on its REST API that it applies on the front-end, allowing unauthenticated users to read the metadata and item contents of private wishlists.

  2. CVE-2026-82305 5.3 Moyenne

    Unknown YITH WooCommerce Wishlist

    The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.