Veille CVE

Recherche « YITH WooCommerce Wishlist »

3 CVE

  1. CVE-2026-112199 6.5 Moyenne

    YITH WooCommerce Wishlist

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Wishlist yith-woocommerce-wishlist allows Stored XSS.This issue affects YITH WooCommerce Wishlist: from n/a through 4.18.1.

  2. CVE-2026-82305 5.3 Moyenne

    Unknown YITH WooCommerce Wishlist

    The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.

  3. CVE-2026-27329 5.3 Moyenne

    YITH WooCommerce Wishlist

    Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YITH WooCommerce Wishlist: from n/a through 4.12.0.