CVE-2026-82305 — YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title

CVE-2026-82305

YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title PUBLISHED

Description (CNA)

The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.

Affected (CNA)

Vendor / product	Versions
Unknown / YITH WooCommerce Wishlist	affected 0 before 4.18.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/2a0a8762-582d-41ae-bb85-a1e906be811a/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.