8.5
High
CVE-2025-32618 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins Wishlist wishlist allows SQL Injection.This issue affects Wishlist: from n/a through <= 1.0.46.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wishlist 1.0 | earliest → 1.0.46 | No fix stated |
Other CVEs of Wishlist
The 6 CVEs of Wishlist →
CVE-2025-49075
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins…
6.5
Medium
CVE-2025-24655
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins…
7.1
High
CVE-2025-32272
Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins Wishlist wishlist allows Cross Site Request…
4.3
Medium
CVE-2024-12809
The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button'…
6.4
Medium