WPC Smart Wishlist for WooCommerce

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WPC Smart Wishlist for WooCommerce

Information

Software Type Plugin
Software Slug woo-smart-wishlist (view on wordpress.org)
Software Status Active
Software Author wpclever
Software Website wpclever.net
Software Downloads 2,986,427
Software Active Installs 100,000
Software Record Last Updated September 8, 2026

6 Vulnerabilities

Submit a Vulnerability
WPC Smart Wishlist for WooCommerce <= 5.0.8 - Missing Authorization
4.3
CVE-2026-32407
Feb 22, 2026
Researcher: Yash Vardhan Tripathi
WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
4.3
CVE-2025-11742
Oct 17, 2025
Researcher: Athiwat Tiprasaharn (Jitlada)
WPC Smart Wishlist for WooCommerce <= 5.0.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
5.3
CVE-2025-11518
Oct 10, 2025
Researcher: Athiwat Tiprasaharn (Jitlada)
WPC Smart Wishlist for WooCommerce <= 4.7.1 - Cross-Site Request Forgery via wishlist_add and wishlist_remove
4.3
CVE-2023-34386
Jun 3, 2023
Researcher: István Márton
WPC Smart Wishlist for WooCommerce <= 2.9.8 - Reflected Cross-Site Scripting
6.1
CVE-2022-1465
Apr 25, 2022
Researcher: Utkarsh Agrawal
WPC Smart Wishlist for WooCommerce <= 2.9.3 - Reflected Cross-Site Scripting
6.1
CVE-2022-0397
Mar 1, 2022
Researcher: Krzysztof Zając
Title Status CVE ID CVSS Researchers Date
WPC Smart Wishlist for WooCommerce <= 5.0.8 - Missing Authorization Patched CVE-2026-32407 4.3 Yash Vardhan Tripathi February 22, 2026
WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposure Patched CVE-2025-11742 4.3 Athiwat Tiprasaharn (Jitlada) October 17, 2025
WPC Smart Wishlist for WooCommerce <= 5.0.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation Patched CVE-2025-11518 5.3 Athiwat Tiprasaharn (Jitlada) October 10, 2025
WPC Smart Wishlist for WooCommerce <= 4.7.1 - Cross-Site Request Forgery via wishlist_add and wishlist_remove Patched CVE-2023-34386 4.3 István Márton June 3, 2023
WPC Smart Wishlist for WooCommerce <= 2.9.8 - Reflected Cross-Site Scripting Patched CVE-2022-1465 6.1 Utkarsh Agrawal April 25, 2022
WPC Smart Wishlist for WooCommerce <= 2.9.3 - Reflected Cross-Site Scripting Patched CVE-2022-0397 6.1 Krzysztof Zając March 1, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation