CVE-2025-30879

Summary

CVE-2025-30879 is a newly disclosed SQL Injection vulnerability affecting the MC Woocommerce Wishlist plugin. The flaw, which allows for the injection of malicious SQL commands, can be exploited to gain unauthorized access to sensitive data or even take control of the affected system. This issue affects MC Woocommerce Wishlist versions from n/a through 1.8.9, and it arises due to the plugin's failure to properly neutralize special elements in SQL commands. Users are strongly advised to update their installations to the latest, secure version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.