TI WooCommerce Wishlist plugin versions before 2.13.0 contain an authorization flaw that allows unauthenticated users to delete items from other users' wishlists if they know or guess the wishlist's share key. This occurs because the plugin does not verify ownership of the wishlist for visitors who are not logged in.