YITH WooCommerce Wishlist vulnerabilities

The YITH WooCommerce Wishlist plugin up to version 4.18.1 contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. Malicious JavaScript can be persistently stored and executed in a user's browser.

The YITH WooCommerce Wishlist plugin up to version 4.12.0 contains an authorization bypass through a user-controlled key vulnerability. This allows exploitation of incorrectly configured access control security levels.

The YITH WooCommerce Wishlist plugin for WordPress in all versions up to and including 4.10.0 is vulnerable to Insecure Direct Object Reference via the REST API endpoint and AJAX handler due to missing validation on user-controlled keys. This allows unauthenticated attackers to discover any user's wishlist token ID and subsequently rename the victim's wishlist without authorization.