Vulnerabilities / TI WooCommerce Wishlist
TI WooCommerce Wishlist vulnerabilities
Advisories WPSec published for TI WooCommerce Wishlist. Other sources may list more. Its attack surface: TI WooCommerce Wishlist on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-13 | WPSEC-2026-0856 | TI WooCommerce Wishlist <= 2.12.1 - Unauthenticated Authorization Bypass to Guest Wishlist Takeover via 'tinv_wishlistkey' Cookie | Medium 6.5 | 2.13.0 |
| 2026-10-13 | WPSEC-2026-0855 | TI WooCommerce Wishlist <= 2.12.1 - Unauthenticated Sensitive Information Exposure of Private Wishlists via 'tinvwl-sharekey' Parameter | Low 3.7 | 2.13.0 |
License: CC BY 4.0