TI WooCommerce Wishlist

Vulnerabilities 16Slug ti-woocommerce-wishlistLatest version 2.11.1WordPress.org →

Minimum safe version

2.11.0

Update to 2.11.0 or later to address 16 fixable vulnerabilities

Latest available2.11.1 ✓

Medium 5.3

2025-12-13< 2.11.0

TI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injection

EUVD Wordfence CVE

Medium 5.3

2025-09-22< 2.11.0

TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization

Wordfence EUVD CVE

Medium 5.3

2025-12-16< 2.11.0

CVE-2025-67929

CVE Wordfence

Medium 6.5

2025-05-19< 2.11.0

CVE-2025-32920

CVE EUVD Wordfence

Critical 10.0

2025-05-19< 2.10.0

CVE-2025-47577

CVE EUVD Wordfence

High 7.5

2024-12-04< 2.9.2

CVE-2024-10567

CVE Wordfence Patchstack

High 7.5

2024-10-10< 2.9.1

CVE-2024-9156

CVE Patchstack Wordfence

Critical 9.8

2024-08-29< 2.9.0

CVE-2024-43917

CVE Patchstack Wordfence

N/A

< 1.21.12

TI WooCommerce Wishlist - Authenticated WP Options Change

WPScan

N/A

2023-07-31< 2.7.4

WordPress TI WooCommerce Wishlist Plugin < 2.7.4 is vulnerable to SQL Injection

Patchstack

N/A

2023-07-31< 2.7.4

TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API

Wordfence

N/A

2023-07-19< 1.7.0

WordPress TI WooCommerce Wishlist Plugin <= 1.6.2 is vulnerable to Cross Site Scripting (XSS)

Patchstack WPScan CVE

High 8.8

2023-06-07< 1.21.12

CVE-2020-36725

CVE

N/A

2020-10-16< 1.21.12

TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update

Wordfence

N/A

2020-10-16< 1.21.12

WordPress TI WooCommerce Wishlist plugin <= 1.21.11 - Authenticated WP Options Change vulnerability

Patchstack

Critical 9.8

2022-02-28< 1.40.1

CVE-2022-0412

CVE Patchstack Patchstack Wordfence WPScan