Wishlist Plugin Flaw Exposes Sites
- CVE-2025-47577 rated CVSS 10.0.
- Impacts TI WooCommerce Wishlist plugin ≤ 2.9.2.
- Over 100,000 WordPress sites affected.
- Unauthenticated users can upload arbitrary files.
- No official patch released yet.
