Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YITH WooCommerce Wishlist: from n/a through 4.12.0.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-07 | 2 | General2 |
| 2026-05-08 | 1 | Active Exploitation1 |
Attention, elevated activities detected targeting YITH WooCommerce Wishlist Plugin (CVE-2026-27329) https://vuldb.com/vuln/361813/cti
Post summary
The post flags observed elevated activity targeting YITH WooCommerce Wishlist plugin (CVE‑2026‑27329), suggesting active exploitation is occurring, though specific technical or PoC details are not disclosed.
CVE-2026-27329 Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Leve… https://www.cve.org/CVERecord?id=CVE-2026-27329
Post summary
The post references CVE‑2026‑27329, noting an authorization bypass due to a user‑controlled key in YITH WooCommerce Wishlist, but offers no PoC, exploit detail, patch, or evidence of active exploitation.
CVE-2026-27329 Authorization Bypass Through User-Controlled Key in YITH WooCommerce Wishlist 4.12.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27329
Post summary
The text references CVE‑2026‑27329 and provides a link to a vulnerability summary but offers no concrete details on exploits, patches, or technical specifics.