yith-woocommerce-wishlist vulnerabilities

CVEs whose affected-version data names the yith-woocommerce-wishlist package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112199Medium· 6.5

today

WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Wishlist yith-woocommerce-wishlist allows Stored XSS.This issue affects YITH WooCommerce Wishlist: from n/a throu…

▾ SunlitYITH · yith-woocommerce-wishlistvia CVEORG