CVE-2025-12427

The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.10.0 via the REST API endpoint and AJAX handler due to missing validation on user-controlled keys. This makes it possible for unauthenticated attackers to discover any user's wishlist token ID, and subsequently rename the victim's wishlist without authorization (integrity impact). This can be exploited to target multi-user stores for defacement, social engineering attacks, mass tampering, and profiling at scale.

• CWE-639

• https://plugins.trac.wordpress.org/browser/yith-woocommerce-wishlist/tags/4.10.0/includes/class-yith-wcwl-ajax-handler.php#L265
• https://plugins.trac.wordpress.org/browser/yith-woocommerce-wishlist/tags/4.10.0/includes/class-yith-wcwl-ajax-handler.php#L38
• https://plugins.trac.wordpress.org/browser/yith-woocommerce-wishlist/tags/4.10.0/includes/rest-api/controllers/v1/class-yith-wcwl-rest-v1-lists-controller.php#L56
• https://plugins.trac.wordpress.org/browser/yith-woocommerce-wishlist/tags/4.10.0/includes/rest-api/controllers/v1/class-yith-wcwl-rest-v1-lists-controller.php#L97
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3394933%40yith-woocommerce-wishlist%2Ftrunk&old=3379519%40yith-woocommerce-wishlist%2Ftrunk&sfp_email=&sfph_mail=#file0
• https://www.wordfence.com/threat-intel/vulnerabilities/id/ffdb95ac-6b22-44a9-bd5c-b802a2d908d7?source=cve

Published

Nov 19, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12421Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10…9.9
• CVE-2025-12422Vulnerable Upgrade Feature (Arbitrary File Write) may lead t…9.8
• CVE-2025-12423Protocol manipulation might lead to denial of service.This i…7.5
• CVE-2025-12424Privilege Escalation through SUID-bit Binary.This issue affe…9.8
• CVE-2025-12425Local Privilege Escalation.This issue affects BLU-IC2: throu…7.8
• CVE-2025-12426The Quiz Maker plugin for WordPress is vulnerable to Sensiti…7.5
• CVE-2025-12428Type Confusion in V8 in Google Chrome prior to 142.0.7444.59…8.8
• CVE-2025-12429Inappropriate implementation in V8 in Google Chrome prior to…8.8
• CVE-2025-1243The Temporal api-go library prior to version 1.44.1 did not …2
• CVE-2025-12430Object lifecycle issue in Media in Google Chrome prior to 14…7.5
• CVE-2025-12431Inappropriate implementation in Extensions in Google Chrome …6.5
• CVE-2025-12432Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a…8.8