PLUGIN SECURITY
Is Yith Woocommerce Wishlist safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Yith Woocommerce Wishlist WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
yith-woocommerce-wishlist
Known vulnerabilities
- CVE-2019-16251 — YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 2.2.14 · Medium
- YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 2.2.0
- YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 2.2.0
- YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 3.15.0
- YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 3.15.0
+ 9 more known vulnerabilities
- CVE-2022-44630 — YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 3.15.0 (CSRF) · Medium
- YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 2.2.0
- CVE-2024-34385 — YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 3.33.0 (XSS) · Medium
- CVE-2025-5238 — YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.6.0 (XSS) · Medium
- CVE-2025-12427 — YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.10.1 (CWE-639) · Medium
- CVE-2025-12777 — YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.10.1 (CWE-285) · Medium
- YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.13.0
- YITH WooCommerce Wishlist [yith-woocommerce-wishlist] <= 4.10.0 (unfixed)
- CVE-2026-27329 — YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.13.0 (CWE-639) · Medium
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.