Saeed vulnerabilities and threats

CVE-2026-119511 is a Missing Authorization vulnerability in the Saeed MC Woocommerce Wishlist plugin, versions prior to 2.0.4. It allows attackers to exploit incorrectly configured access control, potentially leading to unauthorized actions that impact the integrity of the system. The issue is fixed in version 2.0.4.

CVE-2026-119510 is a stored cross-site scripting (XSS) vulnerability in Saeed MC Woocommerce Wishlist versions prior to 2.0.4. The flaw arises from improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in users' browsers. This vulnerability affects versions from initial releases up to 2.0.3 and has a CVSS score of 6.5, indicating a medium severity level.