Known CVE

WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection

WordPress TI WooCommerce Wishlist plugin before 1.40.1 contains a SQL injection vulnerability. The plugin does not sanitize and escape the item_id parameter before using it in a SQL statement via the wishlist/remove_product REST endpoint.

CVE-2022-0412

Critical2022CVSS 9.8CWE-89

time-based-sqli · cve2022 · sqli · ti-woocommerce-wishlist · wpscan · woocommerce · wordpress · wp-plugin

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website