Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

YITH WooCommerce Wishlist — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in YITH WooCommerce Wishlist, with AI-generated Chinese analysis, references, and POCs.

Vendor: YITHEMES

CVE IDTitleCVSSSeverityPaused
CVE-2026-4432 YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR 5.3 -2026-04-10
CVE-2025-12427 YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename CWE-639 5.3 Medium2025-11-19
CVE-2025-12777 YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion CWE-285 5.3 Medium2025-11-19
CVE-2025-5238 YITH WooCommerce Wishlist <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CWE-79 6.4 Medium2025-06-14
CVE-2024-34385 WordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium2024-06-03

All 5 known CVE vulnerabilities affecting YITH WooCommerce Wishlist with full Chinese analysis, references, and POCs where available.