Options Change Vulnerability in TI WooCommerce Wishlist Plugin for WordPress

CVE-2020-36725

What is CVE-2020-36725?

The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress have a vulnerability that allows authenticated attackers to modify settings due to improper handling in the export class file. This flaw impacts all versions up to 1.21.11 and 1.21.4, granting unauthorized access to settings and configurations, which could severely compromise the security of affected WordPress sites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References