← WordPress Vulnerabilities
WordPress security by component

Wishlist for WooCommerce

Wishlist for WooCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 25, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: th-wishlist

CVE-2025-12040: Wishlist for WooCommerce: A security weakness

Wishlist for WooCommerce is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedNov 25, 2025
Safe version guidanceSee mitigation notes
Safe version
Nov 25, 2025 CVE-2025-12040
Wishlist for WooCommerce: A security weakness
Wishlist for WooCommerce is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVDPending