5.3
Medium
CVE-2026-82305 The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given…
Description
The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| YITH WooCommerce Wishlist 4.18 | earliest → < 4.18.1 | 4.18.1 |