Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-16	CVE-2022-1465	Unspecified vulnerability in Wpclever WPC Smart Wishlist for Woocommerce The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issue. network low complexity wpclever	6.1
2022-03-28	CVE-2022-0397	Unspecified vulnerability in Wpclever WPC Smart Wishlist for Woocommerce The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_quickview AJAX action's response (available to any authenticated user), leading to a Reflected Cross-Site Scripting network low complexity wpclever	5.4