WordPress plugin
QODE Wishlist for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All QODE Wishlist for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting via 'table_title' Shared Wishlist Field via Guest Cookie ≤1.2.9Update to 1.3.0 | CVE-2026-121516 | |
| Medium5.3 | Unauthenticated Insecure Direct Object Reference to Wishlist Update ≤1.2.7Update to 1.2.8 | CVE-2025-13157 |
- Medium6.1Unauthenticated Stored Cross-Site Scripting via 'table_title' Shared Wishlist Field via Guest Cookie
≤1.2.9Update to 1.3.0
- Medium5.3Unauthenticated Insecure Direct Object Reference to Wishlist Update
≤1.2.7Update to 1.2.8
QODE Wishlist for WooCommerce: common questions
Does QODE Wishlist for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in QODE Wishlist for WooCommerce: 2 medium. None are known to affect version null.
How do I check which version of QODE Wishlist for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent QODE Wishlist for WooCommerce vulnerability?
CVE-2026-121516, published Nov 6, 2026: QODE Wishlist for WooCommerce <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via 'table_title' Shared Wishlist Field via Guest Cookie. Severity: Medium (CVSS 6.1).
Is any QODE Wishlist for WooCommerce vulnerability listed in CISA KEV?
No. None of the known QODE Wishlist for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.