Now officially on WordPress.org

CVE Database / CVE-2022-0412

CVE · Critical

CVE-2022-0412 — TI WooCommerce Wishlist [ti-woocommerce-wishlist] < 1.40.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-0412 TI WooCommerce Wishlist [ti-woocommerce-wishlist] < 1.40.1 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Critical 9.8 < 1.40.1 1.40.1 2022-01-31 —

CVE-2022-0412

The TI WooCommerce Wishlist and Pro plugins for WordPress do not properly filter and protect against malicious input in the wishlist/remove_product REST endpoint, which can be exploited by unauthenticated attackers to inject malicious SQL code and potentially gain unauthorized access to the database.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings