CVE-2025-58247
BaseFortify
Publication date: 2025-09-22
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ti | woocommerce_wishlist | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-58247 is a Broken Access Control vulnerability in the TI WooCommerce Wishlist WordPress plugin (up to version 2.10.0). It occurs because of missing authorization, authentication, or nonce token checks in certain plugin functions, which allows unauthenticated users to perform actions that should require higher privileges. This means attackers can exploit incorrectly configured access control to escalate privileges without proper permission. [1]
How can this vulnerability impact me? :
This vulnerability can allow unauthorized users to perform privileged actions within the TI WooCommerce Wishlist plugin, potentially leading to unauthorized privilege escalation. Although the severity is considered low (CVSS 5.3) and exploitation is unlikely, it still poses a security risk by allowing attackers to bypass access controls and perform actions they should not be able to. Users should consider virtual patching or monitoring for updates to mitigate this risk. [1]
What immediate steps should I take to mitigate this vulnerability?
Since no official fix or patched version is currently available for this vulnerability, immediate mitigation steps include applying virtual patching (vPatching) solutions provided by Patchstack to neutralize the security risk without impacting performance. Additionally, users should monitor for updates and consider restricting access to the affected plugin functions to reduce the risk of unauthorized privilege escalation. [1]