Known vulnerabilities in WishSuite – Wishlist for WooCommerce

WishSuite integrates wishlist functionality into your WooCommerce store, so customers can easily add products to their wishlists for later purchases.

5Reported vulnerabilities

8.8Highest CVSS score

1.5.8Latest version

1,000+Active installs

What to do now

Update WishSuite – Wishlist for WooCommerce to 1.5.2 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 6, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-30820	High 8.8	1.1%	1.4.4 and earlier	`1.4.5`	March 27, 2025
CVE-2024-29927	Medium 6.4	0.3%	1.3.7 and earlier	`1.3.8`	March 25, 2024
CVE-2025-13838	Medium 6.4	0.2%	0 to 1.5.1 (inclusive)	`1.5.2`	December 21, 2025
CVE-2023-32962	Medium 4.4	0.4%	1.3.4 and earlier	`1.3.5`	May 18, 2023
CVE-2023-23731	Medium 4.3	0.3%	1.3.3 and earlier	`1.3.4`	March 30, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.