High · 7.6 CVE-2026-66631 EUVD-2026-81511GHSA-gh92-vvh9-jgw9

WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability

Published Sep 17, 2026 · Updated Sep 17, 2026 · Assigned by Patchstack

Vendor: Moreconvert Team Product: MC Woocommerce Wishlist Category: Web / CMS

Description

Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.

Affected products

Vendor	Product	Affected	Fixed
Moreconvert Team	MC Woocommerce Wishlist	≤ 1.9.21	—

References

https://patchstack.com/database/wordpress/plugin/smart-wishlist-for-more-convert/vulnerability/wordpress-mc-woocommerce-wishlist-plugin-1-9-21-sql-injection-vulnerability?_s_id=cve vdb-entry