10.0
Critical
CVE-2025-47577 Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist…
Description
Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.9.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| TI WooCommerce Wishlist 2.9 | earliest → 2.9.2 | No fix stated |
Other CVEs of TI WooCommerce Wishlist
The 9 CVEs of TI WooCommerce Wishlist →
CVE-2025-67929
Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows…
5.3
Medium
CVE-2025-9207
The TI WooCommerce Wishlist plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including,…
5.3
Medium
CVE-2025-58247
Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows…
5.3
Medium
CVE-2025-32920
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in templateinvaders…
6.5
Medium