Description
The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | YITH WooCommerce Wishlist | < 4.18.1 | 4.18.1 |
References
- https://wpscan.com/vulnerability/2a0a8762-582d-41ae-bb85-a1e906be811a/ exploit vdb-entry technical-description