Medium · 5.9 CVE-2023-32962 EUVD-2023-37183GHSA-c35r-c563-xx7p

WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Published Aug 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin <= 1.3.4 versions.

Vendor	Product	Affected	Fixed
HasTheme	WishSuite – Wishlist for WooCommerce	≤ 1.3.4	—