CVE Database /
CVE-2024-10567
CVE · High
CVE-2024-10567 — TI WooCommerce Wishlist [ti-woocommerce-wishlist] < 2.9.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-10567
|
TI WooCommerce Wishlist [ti-woocommerce-wishlist] < 2.9.2 |
Missing Authorization |
High
7.5
|
< 2.9.2
|
2.9.2 |
2024-12-03 |
—
|
CVE-2024-10567
The TI WooCommerce Wishlist plugin for WordPress contains a security flaw that allows unauthorized users to make changes to the plugin and its settings. This vulnerability occurs because the plugin does not properly check user permissions before allowing certain actions, such as creating new pages or modifying plugin settings. As a result, attackers can exploit this weakness to make unauthorized changes to the plugin, even if they are not authenticated.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings