Skip to content
OpenAdvisories

Product · PickPlugins

Wishlist

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-49075

    WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Wishlist wishlist allows Stored XSS.This issue affects Wishlist: from n/a through <= 1.0.43.

    PickPlugins Wishlist
  • Medium 4.3
    CVE-2025-32272

    WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins Wishlist wishlist allows Cross Site Request Forgery.This issue affects Wishlist: from n/a through <= 1.0.46.

    PickPlugins Wishlist
  • Medium 6.4
    CVE-2024-12809

    Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button' shortcode in all versions up to, and including, 1.0.43 due to insufficient input sanitization and output escaping on user supplied attributes. Th…

    PickPlugins Wishlist Web / CMS