Volerion logoVolerion
Volerion logoVolerion

TI WooCommerce Wishlist Missing Authorization Vulnerability Allowing Access Control Exploitation

Vulnerability

A missing authorization vulnerability has been identified in the TI WooCommerce Wishlist plugin for WordPress, affecting versions through 2.10.0. This vulnerability allows unauthorized users to exploit improperly configured access control levels, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could allow an unauthorized user to perform actions that require higher privileges, due to the lack of proper authorization checks.

Added: Sep 22, 2025, 8:55 PM
Updated: Sep 22, 2025, 11:05 PM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
5.0
exploitability
7.6
remediation
0.0
relevance
0.6
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.