Known vulnerabilities in yithemes YITH WooCommerce Wishlist
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-12427 | The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions… | 5.3 Medium | Nov 19, 2025 |
| CVE-2025-12777 | The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to authorization bypass in all versions up to, and… | 5.3 Medium | Nov 19, 2025 |
| CVE-2025-5238 | The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter… | 6.4 Medium | Jun 14, 2025 |
| CVE-2024-34385 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH… | 5.9 Medium | Jun 3, 2024 |
Other yithemes products
YITH WooCommerce Product Add-Ons 6
YITH WooCommerce Ajax Search 3
YITH WooCommerce Tab Manager 2
yith_woocommerce_ajax_search 2
YITH WooCommerce Compare 2
YITH Custom Login 2
YITH WooCommerce Gift Cards 1
YITH WooCommerce Zoom Magnifier 1
yith_woocommerce_social_login 1
YITH WooCommerce Request A Quote 1
YITH WooCommerce Quick View 1
yith_woocommerce_product_add-ons 1