Wpclever Wpc Smart Wishlist For Woocommerce vulnerabilities

6 vulnerabilities

Known vulnerabilities in Wpclever Wpc Smart Wishlist For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2025-11742wordpresswoo-smart-wishlist+1
EPSS score
0.28%
The WPC Smart Wishlist for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wishlist_quickview' AJAX action in all versions up to, and including, 5.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's wishlist data and information.5.3CVE-2025-11518wordpresswoo-smart-wishlist+1
EPSS score
0.23%
The WPC Smart Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.0.3 via several wishlist AJAX functions due to missing validation on a user controlled key that is exposed when wishlists are shared. This makes it possible for unauthenticated attackers to empty and add to other user's wishlists, if they have access to the key.6.1CVE-2022-1465unknownwpc smart wishlist for woocommerce+2
EPSS score
0.86%
The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issue.6.1CVE-2022-0397unknownwpc smart wishlist for woocommerce+2
EPSS score
0.60%
The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_quickview AJAX action's response (available to any authenticated user), leading to a Reflected Cross-Site Scripting4.3CVE-2026-32407wordpresswoo-smart-wishlist+1
EPSS score
0.26%
Missing Authorization vulnerability in WPClever WPC Smart Wishlist for WooCommerce woo-smart-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Smart Wishlist for WooCommerce: from n/a through <= 5.0.8.8.8CVE-2023-34386wordpresswoo-smart-wishlist+1
EPSS score
0.31%
Cross-Site Request Forgery (CSRF) vulnerability in WPClever WPC Smart Wishlist for WooCommerce plugin <= 4.7.1 versions.