Threats tagged 'ghsa-7vhp-9r7r-4h86'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-124648The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not verify that a visitor who is not logged in owns a Medium2026-11-12GCVE DatabaseCVE-2026-124648 The TI WooCommerce Wishlist WordPress plugin versions prior to 2.13.0 contain a vulnerability where unauthenticated visitors can manage wishlists belonging to other users if they know or guess the wishlist's share key. This allows unauthorized deletion of items from other customers' wishlists. Report on CVE-2026-124648 Vulnerability #ghsa-7vhp-9r7r-4h86	GCVE Database	2026-11-12

Page 1 of 1