Skip to content

Known vulnerabilities in PickPlugins Wishlist

Is your version affected?

CVE Summary Score Published
CVE-2025-49075 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins… 6.5 Medium Jun 6, 2025
CVE-2025-24655 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins… 7.1 High Apr 17, 2025
CVE-2025-32618 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins… 8.5 High Apr 11, 2025
CVE-2025-32272 Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins Wishlist wishlist allows Cross Site Request… 4.3 Medium Apr 4, 2025
CVE-2024-12809 The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button'… 6.4 Medium Mar 7, 2025
CVE-2025-26915 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins… 8.5 High Feb 25, 2025

Other PickPlugins products