https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:37:01 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-66595 cnvd-2022-66595 https://cve.radiocsirt.org/vuln/cnvd-2022-66595 https://cve.radiocsirt.org/vuln/euvd-2026-10898 EUVD-2026-10898 https://cve.radiocsirt.org/vuln/euvd-2026-10898 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0412 <p>The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before using it in a SQL statement via the wishlist/remove_product REST endpoint, allowing unauthenticated attackers to perform SQL injection attacks</p> <p>The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before using it in a SQL statement via the wishlist/remove_product REST endpoint, allowing unauthenticated attackers to perform SQL injection attacks</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0412 https://cve.radiocsirt.org/vuln/ghsa-h2g7-6p9r-jg23 <p>The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before using it in a SQL statement via the wishlist/remove_product REST endpoint, allowing unauthenticated attackers to perform SQL injection attacks</p> <p>The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before using it in a SQL statement via the wishlist/remove_product REST endpoint, allowing unauthenticated attackers to perform SQL injection attacks</p> https://cve.radiocsirt.org/vuln/ghsa-h2g7-6p9r-jg23 https://cve.radiocsirt.org/vuln/gsd-2022-0412 gsd-2022-0412 https://cve.radiocsirt.org/vuln/gsd-2022-0412