Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-49319 EUVD-2025-21628GHSA-qq5v-44q6-jjqm

WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability

Published Jul 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wishlist for WooCommerce: from n/a through <= 3.2.3.

Affected products

VendorProductAffectedFixed
WPFactory Wishlist for WooCommerce ≤ 3.2.3 —

References