YITH WooCommerce Wishlist

WordPress plugin · yith-woocommerce-wishlist · WordPress.org ↗

Latest v4.18.1 Last release Sep 7, 2026 Tested up to WP 7.1.1 400,000+ active installs

Critical

High

Known total

Unfixed

Running YITH WooCommerce Wishlist on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
MEDIUM CVSS 5.3	YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title CVE.org	>=0, <4.18.1	v4.18.1	CVE-2026-82305	Sep 11, 2026
MEDIUM CVSS 5.3	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.13.0 WPVulnerability	< 4.13.0	v4.13.0	CVE-2026-27329	May 7, 2026
MEDIUM CVSS 5.3	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.10.1 WPVulnerability	< 4.10.1	v4.10.1	CVE-2025-12777	Nov 18, 2025
MEDIUM CVSS 5.3	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] <= 4.10.0 (unfixed) WPVulnerability	<= 4.10.0	unfixed	CVE-2025-12427	Nov 18, 2025
MEDIUM CVSS 6.4	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.6.0 WPVulnerability	< 4.6.0	v4.6.0	CVE-2025-5238	Jun 13, 2025
MEDIUM CVSS 5.9	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 3.33.0 WPVulnerability	< 3.33.0	v3.33.0	CVE-2024-34385	May 30, 2024
MEDIUM CVSS 4.6	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 3.15.0 WPVulnerability	< 3.15.0	v3.15.0	CVE-2022-44630	Nov 11, 2022
MEDIUM CVSS 4.3	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 2.2.14 WPVulnerability	< 2.2.14	v2.2.14	CVE-2019-16251	Oct 31, 2019
UNKNOWN	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.18.1 WPVulnerability	< 4.18.1	v4.18.1	CVE-2026-82305	May 7, 2026
UNKNOWN	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.13.0 WPVulnerability · PoC available	< 4.13.0	v4.13.0	CVE-2026-4432	Mar 20, 2026
UNKNOWN	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 3.15.0 WPVulnerability	< 3.15.0	v3.15.0	—	Nov 11, 2022
UNKNOWN	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 2.2.0 WPVulnerability	< 2.2.0	v2.2.0	—	Jan 17, 2018
UNKNOWN	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 2.2.0 WPVulnerability	< 2.2.0	v2.2.0	—	Jan 16, 2018
UNKNOWN	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 2.2.0 WPVulnerability	< 2.2.0	v2.2.0	—	—
UNKNOWN	YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 3.15.0 WPVulnerability	< 3.15.0	v3.15.0	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.