TI WooCommerce Wishlist
Moderate fix1 remedy
cpe:2.3:a:templateinvaders:ti_woocommerce_wishlist:*:*:*:*:wordpress:*:*
Moderate fix1 remedy
- <= 2.10.0
TI WooCommerce Wishlist HTML Injection Vulnerability
Vulnerability
Patched
A vulnerability allowing HTML injection has been identified in the TI WooCommerce Wishlist plugin for WordPress, affecting all versions through 2.10.0. The issue arises because the plugin accepts hidden fields without proper validation, allowing unauthenticated attackers to inject arbitrary HTML into wishlist items.
Impact
Exploitation of this vulnerability allows for HTML injection, which could be used to manipulate the appearance of the website or potentially execute malicious scripts, depending on the context in which the injected HTML is rendered.
Remediation
Users are advised to update the TI WooCommerce Wishlist plugin to version 2.11.0 or later.
Added: Dec 13, 2025, 4:24 PM
Updated: Dec 13, 2025, 4:24 PM
Vulnerability Rating
Custom Algorithm
spread
3.4impact
0.6exploitability
9.0remediation
7.7relevance
1.4threat
3.2urgency
2.9incentive
10.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.