8.5
Élevée
CVE-2025-32618 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins Wishlist wishlist allows SQL Injection.This issue affects Wishlist: from n/a through <= 1.0.46.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wishlist 1.0 | premières → 1.0.46 | Pas de correctif indiqué |
Autres CVE de Wishlist
Les 6 CVE de Wishlist →
CVE-2025-49075
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins…
6.5
Moyenne
CVE-2025-24655
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins…
7.1
Élevée
CVE-2025-32272
Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins Wishlist wishlist allows Cross Site Request…
4.3
Moyenne
CVE-2024-12809
The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button'…
6.4
Moyenne