Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
pickplugins

pickplugins Wishlist vulnerabilities

6 published CVEs name pickplugins Wishlist among the affected products.

All 6 in the listAtom feed of new CVEs
Published CVEs
6
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 3Medium 3Low 0Not scored 0

Newest CVEs

  • CVE-2025-49075

    WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability

    PickPlugins · Wishlist

    Medium6.5
  • CVE-2025-24655

    WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability

    PickPlugins · Wishlist

    High7.1
  • CVE-2025-32618

    WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability

    PickPlugins · Wishlist

    High8.5
  • CVE-2025-32272

    WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability

    PickPlugins · Wishlist

    Medium4.3
  • CVE-2024-12809

    Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting

    pickplugins · Wishlist

    Medium6.4
  • CVE-2025-26915

    WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerability

    PickPlugins · Wishlist

    High8.5

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)3
  2. CWE-89 SQL injection2
  3. CWE-352 Cross-site request forgery (CSRF)1