CVE-2025-12040

MediumCVSS 6.5/10Last modified Oct 18, 2026

Description

The Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.3 via several functions in class-th-wishlist-frontend.php due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to modify other user's wishlists

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published: Nov 25, 2025
Last modified: Oct 18, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-120415.3The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'erifl_file'CVE-2025-120425.3The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in the csv-exp CVE-2025-120435.3The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec CVE-2025-120447.5Vault and Vault Enterprise (“Vault”) are vulnerable to an unauthenticated denial of service when processing JSON payloads. This occurs due t CVE-2025-120456.4The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cros CVE-2025-120467.8A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated us CVE-2025-120475.3A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances,CVE-2025-120487.5An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow CVE-2025-120499.8Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may CVE-2025-120507.8The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may CVE-2025-120517.8The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may CVE-2025-120527.8The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may