CVE-2025-58247: WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.10.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58247?
CVE-2025-58247 has high severity due to a missing authorization vulnerability that can be exploited through incorrectly configured access control.
How do I fix CVE-2025-58247?
To fix CVE-2025-58247, update TI WooCommerce Wishlist to version 2.10.1 or later, which addresses the access control issue.
What versions of TI WooCommerce Wishlist are affected by CVE-2025-58247?
CVE-2025-58247 affects the TI WooCommerce Wishlist versions up to and including 2.10.0.
What types of attacks can be carried out due to CVE-2025-58247?
Due to CVE-2025-58247, attackers can potentially exploit the missing authorization to access and modify user wishlists without proper permissions.
Is the CVE-2025-58247 vulnerability present in other plugins?
CVE-2025-58247 is specifically associated with the TI WooCommerce Wishlist Plugin and does not directly indicate vulnerabilities in other plugins.