High · 7.1 CVE-2026-57356 EUVD-2026-41355GHSA-xfpp-93xp-3xr4

WordPress MC Woocommerce Wishlist plugin <= 1.9.19 - Cross Site Scripting (XSS) vulnerability

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack

Vendor: Moreconvert Team Product: MC Woocommerce Wishlist Category: Web / CMS

Description

Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19 versions.

Affected products

Vendor	Product	Affected	Fixed
Moreconvert Team	MC Woocommerce Wishlist	≤ 1.9.19	—

References

https://patchstack.com/database/wordpress/plugin/smart-wishlist-for-more-convert/vulnerability/wordpress-mc-woocommerce-wishlist-plugin-1-9-19-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry