Wishlist

This hub aggregates every CVE we track for Wishlist, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 12 most recently published vulnerabilities affecting Wishlist.

• CVE-2025-31061WordPress Wishlist plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1Jun 9, 2025
• CVE-2025-49075WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability6.5Jun 6, 2025
• CVE-2025-31062WordPress Wishlist plugin <= 2.1.0 - Sensitive Data Exposure Vulnerability4.3May 16, 2025
• CVE-2025-31063WordPress Wishlist plugin <= 2.1.0 - Broken Access Control Vulnerability4.3May 16, 2025
• CVE-2025-24655WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability7.1Apr 17, 2025
• CVE-2025-32618WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability8.5Apr 11, 2025
• CVE-2025-32272WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability4.3Apr 4, 2025
• CVE-2024-12809Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4Mar 7, 2025
• CVE-2025-26915WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerability8.5Feb 25, 2025
• CVE-2015-3357Cross-site scripting (XSS) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the "access wishlists" permission to inje...3.5Apr 21, 2015
• CVE-2015-3354Cross-site request forgery (CSRF) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote attackers to hijack the authentication of arbitrary users f...5.8Apr 21, 2015
• CVE-2012-2069Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary...6.8Sep 6, 2012