8.5
High
CVE-2025-26915 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins Wishlist wishlist allows SQL Injection.This issue affects Wishlist: from n/a through <= 1.0.41.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wishlist 1.0 | earliest → 1.0.41 | No fix stated |
Other CVEs of Wishlist
The 6 CVEs of Wishlist →
CVE-2025-49075
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins…
6.5
Medium
CVE-2025-24655
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins…
7.1
High
CVE-2025-32618
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins…
8.5
High
CVE-2025-32272
Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins Wishlist wishlist allows Cross Site Request…
4.3
Medium