← Database

CVE-2026-82305

MEDIUM CVSS: 5.3 Published: 2026-09-11 Modified: 2026-09-11

Description

The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.

Affected Platforms

Unknown

Weakness Type

CWE-639

References