Threats tagged 'ghsa-9c3x-hc2h-94xp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-124763The Woocommerce Wishlist WordPress plugin through 1.1.0 does not have authorisation and CSRF checks in one of its High2026-11-13GCVE DatabaseCVE-2026-124763 The Woocommerce Wishlist WordPress plugin up to version 1.1.0 lacks authorization and CSRF protections in an unauthenticated AJAX action. This vulnerability allows unauthenticated users to overwrite any site option with a URL or empty value, potentially breaking the site by altering critical settings such as the site URL or deactivating the plugin. Report on CVE-2026-124763 Vulnerability #ghsa-9c3x-hc2h-94xp	GCVE Database	2026-11-13

Page 1 of 1