CVE-2025-12427
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
The YITH WooCommerce Wishlist plugin for WordPress in all versions up to and including 4.10.0 is vulnerable to Insecure Direct Object Reference via the REST API endpoint and AJAX handler due to missing validation on user-controlled keys. This allows unauthenticated attackers to discover any user's wishlist token ID and subsequently rename the victim's wishlist without authorization.
Risk Assessment
Attackers can modify other users' wishlists without authorization, enabling defacement of multi-user stores, social engineering attacks, and mass data tampering.
Recommendation
Upgrade the YITH WooCommerce Wishlist plugin to a version later than 4.10.0 containing the fix. Until then, consider restricting access to the plugin's REST/AJAX endpoints.
Other vulnerabilities in YITH WooCommerce Wishlist
See all- CVE-2026-112199Medium
The YITH WooCommerce Wishlist plugin up to version 4.18.1 contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. Malicious JavaScript can be persistently stored and executed in a user's browser.
- CVE-2026-27329Medium
The YITH WooCommerce Wishlist plugin up to version 4.12.0 contains an authorization bypass through a user-controlled key vulnerability. This allows exploitation of incorrectly configured access control security levels.
Original NVD description (English source)
The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.10.0 via the REST API endpoint and AJAX handler due to missing validation on user-controlled keys. This makes it possible for unauthenticated attackers to discover any user's wishlist token ID, and subsequently rename the victim's wishlist without authorization (integrity impact). This can be exploited to target multi-user stores for defacement, social engineering attacks, mass tampering, and profiling at scale.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS