TemplateInvaders vulnerabilities and threats

6 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5		CVE-2026-120855TI WooCommerce Wishlist (WordPress plugin) · Cross-site Scripting Medium6.52026-11-09CVE Database V5CVE-2026-120855 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TemplateInvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Stored XSS.This issue affects TI WooCommerce Wishlist: from n/a through 2.14.0. Vulnerability TemplateInvaders	CVE Database V5	2026-11-09
Medium	5.3	EPSS 0.3%	CVE-2025-67929TI WooCommerce Wishlist (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-12-16CVE Database V5CVE-2025-67929 Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.10.0. EPSS 0.3%Vulnerability templateinvaders	CVE Database V5	2025-12-16
Medium	5.3	EPSS 0.4%	CVE-2025-9207TI WooCommerce Wishlist (WordPress plugin) · Improper Input Validation Medium5.3EPSS 0.4%2025-12-13CVE Database V5CVE-2025-9207 The TI WooCommerce Wishlist plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.10.0. This is due to the plugin accepting hidden fields and not limiting the values or data that can input and is later output. This makes it possible for unauthenticated attackers to inject arbitrary HTML into wishlist items. EPSS 0.4%Vulnerability templateinvaders CWE-20	CVE Database V5	2025-12-13
Medium	5.3	EPSS 0.3%	CVE-2025-58247TI WooCommerce Wishlist (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-09-22CVE Database V5CVE-2025-58247 Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.10.0. EPSS 0.3%Vulnerability templateinvaders	CVE Database V5	2025-09-22
High	7.5	EPSS 0.4%	CVE-2024-10567TI WooCommerce Wishlist (WordPress plugin) · Missing Authorization High7.5EPSS 0.4%2024-12-04CVE Database V5CVE-2024-10567 The TI WooCommerce Wishlist plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wizard' function in all versions up to, and including, 2.9.1. This makes it possible for unauthenticated attackers to create new pages, modify plugin settings, and perform limited options updates. EPSS 0.4%Vulnerability templateinvaders CWE-862	CVE Database V5	2024-12-04
Critical	9.3	EPSS 22%	CVE-2024-43917TI WooCommerce Wishlist (WordPress plugin) · SQL Injection Critical9.3EPSS 22%2024-08-29CVE Database V5CVE-2024-43917 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a through 2.8.2. EPSS 22%Vulnerability TemplateInvaders CWE-89	CVE Database V5	2024-08-29

Page 1 of 1