medium5.3
CVE-2026-82305
The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated use…
Impact
The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.
Affected products
| Product | Affected versions |
|---|---|
| YITH WooCommerce Wishlist WordPress Plugin | before 4.18.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.