CVE-2026-82305: Unknown Yith Woocommerce Wishlist

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.

Affected products

• Unknown Yith Woocommerce Wishlist: before 4.18.1 (fixed in 4.18.1)

Published 2026-09-11. Last modified 2026-09-11.