CVE-2025-32920

A vulnerability exists in the TI WooCommerce Wishlist plugin for WordPress, affecting versions up to 2.10.0, due to inadequate validation of user input. This allows authenticated attackers with contributor-level access or higher to inject malicious scripts into pages, which will be executed when accessed by other users. As a result, an attacker can potentially inject arbitrary web scripts, leading to unauthorized actions and potential security breaches.

Based on public CVE data (MITRE/NVD).