Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total4
Critical0
High0
Medium4
Reset
Showing 1-4 of 4 records
Threat Entry Updated 2025-10-21

CVE-2025-11742 - Wpc Smart Wishlist For Woocommerce Plugin

The WPC Smart Wishlist for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wishlist_quickview' AJAX action in all versions up to, and including, 5.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's wishlist data and information.

PLUGIN Wpc Smart Wishlist For Woocommerce

CVE-2025-11742

MEDIUM CVSS 4.3 2025-10-18
Threat Entry Updated 2025-10-14

CVE-2025-11518 - Wpc Smart Wishlist For Woocommerce Plugin

The WPC Smart Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.0.3 via several wishlist AJAX functions due to missing validation on a user controlled key that is exposed when wishlists are shared. This makes it possible for unauthenticated attackers to empty and add to other user's wishlists, if they have access to the key.

PLUGIN Wpc Smart Wishlist For Woocommerce

CVE-2025-11518

MEDIUM CVSS 5.3 2025-10-11
Threat Entry Updated 2024-11-21

CVE-2022-1465 - Wpc Smart Wishlist For Woocommerce Plugin

The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issue.

PLUGIN Wpc Smart Wishlist For Woocommerce

CVE-2022-1465

MEDIUM CVSS 6.1 2022-05-16
Threat Entry Updated 2024-11-21

CVE-2022-0397 - Wpc Smart Wishlist For Woocommerce Plugin

The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_quickview AJAX action's response (available to any authenticated user), leading to a Reflected Cross-Site Scripting

PLUGIN Wpc Smart Wishlist For Woocommerce

CVE-2022-0397

MEDIUM CVSS 5.4 2022-03-28
Scroll to top