Skip to content
OpenAdvisories

Vendor

templateinvaders

10 known vulnerabilities.

Products

TI WooCommerce Wishlist 10 TI WooCommerce Wishlist Pro 2
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-120855

    WordPress TI WooCommerce Wishlist plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TemplateInvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Stored XSS.This issue affects TI WooCommerce Wishlist: from n/a through 2.14.0.

    templateinvaders TI WooCommerce Wishlist Web / CMS
  • Medium 5.3
    CVE-2025-67929

    WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.10.0.

    templateinvaders TI WooCommerce Wishlist Web / CMS
  • Medium 5.3
    CVE-2025-9207

    TI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injection

    The TI WooCommerce Wishlist plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.10.0. This is due to the plugin accepting hidden fields and not limiting the values or data that can input and is later output. This makes…

    templateinvaders TI WooCommerce Wishlist Web / CMS
  • Medium 5.3
    CVE-2025-58247

    WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.10.0.

    templateinvaders TI WooCommerce Wishlist Web / CMS
  • Medium 6.5
    CVE-2025-32920

    WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Stored XSS.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.10.0.

    templateinvaders TI WooCommerce Wishlist Web / CMS