What’s Vulnerable › Products

yithemes YITH WooCommerce Wishlist vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your yithemes YITH WooCommerce Wishlist version is affected

Latest yithemes YITH WooCommerce Wishlist vulnerabilities

• CVE-2026-112199 — WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-27329 — WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
• CVE-2025-12777 — YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion (CVSS 5.3)
• CVE-2025-12427 — YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename (CVSS 5.3)
• CVE-2025-5238 — YITH WooCommerce Wishlist <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter (CVSS 6.4)
• CVE-2024-34385 — WordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2019-16251 — (CVSS 4.3)