Vulnerabilities > Wpclever > WPC Smart Wishlist FOR Woocommerce > 2.7.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-11-09 | CVE-2023-34386 | Cross-Site Request Forgery (CSRF) vulnerability in Wpclever WPC Smart Wishlist for Woocommerce Cross-Site Request Forgery (CSRF) vulnerability in WPClever WPC Smart Wishlist for WooCommerce plugin <= 4.7.1 versions. | 8.8 |
| 2022-05-16 | CVE-2022-1465 | Cross-site Scripting vulnerability in Wpclever WPC Smart Wishlist for Woocommerce The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issue. | 4.3 |
| 2022-03-28 | CVE-2022-0397 | Cross-site Scripting vulnerability in Wpclever WPC Smart Wishlist for Woocommerce The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_quickview AJAX action's response (available to any authenticated user), leading to a Reflected Cross-Site Scripting | 3.5 |