cleantalk
Vulnerabilities and Security Researches

Wishlist, CVE-2025-32272

CVE, Research URL

CVE-2025-32272

Application

Wishlist

Published on
Apr 04, 2025
Research Description
Wishlist [wishlist] <= 1.0.44 (unfixed) CVE-2025-32272 [en] Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins Wishlist allows Cross Site Request Forgery. This issue affects Wishlist: from n/a through 1.0.44.
Affected versions
Min -, max 1.0.44.
Status
vulnerable