Skip to content
OpenAdvisories
High · 7.6 CVE-2025-30879 EUVD-2025-8317GHSA-mc44-cf28-88w6

WordPress MC Woocommerce Wishlist plugin <= 1.8.9 - SQL Injection vulnerability

Published Mar 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows SQL Injection.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.8.9.

Affected products

VendorProductAffectedFixed
Moreconvert Team MC Woocommerce Wishlist ≤ 1.8.9 —

References