Approved changes feed: RSS · Atom

cpe:2.3:a:moreconvert_team:mc_woocommerce_wishlist:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMoreconvert Team (08d5f39a-c7d8-5a7c-abe3-729c08e1a58c)
ProductMc Woocommerce Wishlist (3cbd67e7-56fb-53fa-807f-e3549f6870f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-66631 vulnerable 2026-10-13 12:28:43.453050 WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability
HIGH (7.6)
Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.
Published: 2026-09-17T13:24:50.942Z
Updated: 2026-09-17T19:21:37.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57356 vulnerable 2026-07-29 01:00:29.656443 WordPress MC Woocommerce Wishlist plugin <= 1.9.19 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19 versions.
Published: 2026-07-02T11:15:16.231Z
Updated: 2026-07-02T19:43:55.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47487 vulnerable 2026-06-08 07:27:14.461205 WordPress MC Woocommerce Wishlist plugin <= 1.9.1 - Cross Site Scripting (XSS) Vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Reflected XSS.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.9.1.
Published: 2025-06-09T15:54:11.431Z
Updated: 2026-04-28T16:12:42.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30879 vulnerable 2026-06-08 07:17:01.976978 WordPress MC Woocommerce Wishlist plugin <= 1.8.9 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows SQL Injection.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.8.9.
Published: 2025-03-27T10:55:39.667Z
Updated: 2026-04-28T16:11:59.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34819 vulnerable 2026-06-08 06:37:35.070779 WordPress MC Woocommerce Wishlist plugin <= 1.7.2 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.2.
Published: 2024-06-11T16:10:39.429Z
Updated: 2026-04-28T16:09:51.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34813 vulnerable 2026-06-08 06:37:35.060846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.