{"id":10407,"date":"2018-01-17T08:24:04","date_gmt":"2018-01-17T14:24:04","guid":{"rendered":"https:\/\/www.siteground.com\/blog\/?p=10407"},"modified":"2025-09-18T14:49:03","modified_gmt":"2025-09-18T14:49:03","slug":"yith-woocommerce-wishlist-protection-added","status":"publish","type":"post","link":"https:\/\/www.siteground.com\/blog\/yith-woocommerce-wishlist-protection-added\/","title":{"rendered":"IMPORTANT: YITH WooCommerce Wishlist Protection Added"},"content":{"rendered":"\n<p>\u0422oday, a serious vulnerability issue with one of the vastly used Yith plugins &#8211; the WooCommerce Wishlist was discovered by&nbsp;<a rel=\"nofollow noopener noreferrer\" href=\"https:\/\/blog.sucuri.net\/2018\/01\/sqli-vulnerability-in-yith-woocommerce-wishlist.html\" target=\"_blank\">Sucuri<\/a>. The latest plugin version &#8211; 2.2.0 patches the vulnerability but all versions prior to it are at risk. To protect our customers, who haven&#8217;t updated their plugin, our security team started working immediately and a WAF rule was just applied on our servers.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>We\u2019re very proud of our internal WAF (Web Application Firewall) system that protects all SiteGround shared and cloud servers. It allows us to dynamically add different rules across our network and block hacking attempts. The moment we got notified about the issue with the YITH WooCommerce Wishlist plugin, our security team started working on the case. We\u2019ve managed to come up with a rule, that shields you against potential attacks utilizing this vulnerability. Although this does not patch the problem in its core, we\u2019ve added protection against those, who try to utilize it. This said, we urge you to update to the latest plugin version, which includes the official patch for this vulnerability.<\/p>\n\n\n<p>[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"\u0422oday, a serious vulnerability issue with one of the vastly used Yith plugins - the WooCommerce Wishlist was discovered by&nbsp;Sucuri. The latest plugin version - 2.2.0 patches the vulnerability but all versions prior to it are at risk. To protect our customers, who haven't updated their plugin, our security team started working immediately and a&hellip;","protected":false},"author":3,"featured_media":13039,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,2018,12],"tags":[],"class_list":["post-10407","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting-insights","category-product-updates","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>YITH WooCommerce Wishlist Protection Added for our WAF | SiteGround Blog<\/title>\n<meta name=\"description\" content=\"After Sucuri released information about a serious vulnerability in the plugin, our security team quickly released a rule which will help you stay protected!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"YITH WooCommerce Wishlist Protection Added for our WAF | SiteGround Blog\" \/>\n<meta property=\"og:description\" content=\"Stay safe by using SiteGround&#039;s internal Web Application firewall!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2018-01-17T14:24:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-18T14:49:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist-facebook.jpg\" \/>\n<meta name=\"author\" content=\"Hristo Pandjarov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"IMPORTANT: YITH WooCommerce Wishlist Protection Added\" \/>\n<meta name=\"twitter:description\" content=\"\u0422oday, a serious vulnerability issue with one of the vastly used Yith plugins - the WooCommerce Wishlist was discovered by&nbsp;Sucuri. The latest plugin\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Hristo Pandjarov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/\"},\"author\":{\"name\":\"Hristo Pandjarov\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\"},\"headline\":\"IMPORTANT: YITH WooCommerce Wishlist Protection Added\",\"datePublished\":\"2018-01-17T14:24:04+00:00\",\"dateModified\":\"2025-09-18T14:49:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/\"},\"wordCount\":188,\"commentCount\":7,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist.jpg\",\"articleSection\":[\"Hosting Insights\",\"Product Updates\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/\",\"name\":\"YITH WooCommerce Wishlist Protection Added for our WAF | SiteGround Blog\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist.jpg\",\"datePublished\":\"2018-01-17T14:24:04+00:00\",\"dateModified\":\"2025-09-18T14:49:03+00:00\",\"description\":\"After Sucuri released information about a serious vulnerability in the plugin, our security team quickly released a rule which will help you stay protected!\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist.jpg\",\"width\":1320,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IMPORTANT: YITH WooCommerce Wishlist Protection Added\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\",\"name\":\"Hristo Pandjarov\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"caption\":\"Hristo Pandjarov\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/hristo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"YITH WooCommerce Wishlist Protection Added for our WAF | SiteGround Blog","description":"After Sucuri released information about a serious vulnerability in the plugin, our security team quickly released a rule which will help you stay protected!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/","og_locale":"en_US","og_type":"article","og_title":"YITH WooCommerce Wishlist Protection Added for our WAF | SiteGround Blog","og_description":"Stay safe by using SiteGround's internal Web Application firewall!","og_url":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2018-01-17T14:24:04+00:00","article_modified_time":"2025-09-18T14:49:03+00:00","og_image":[{"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist-facebook.jpg","type":"","width":"","height":""}],"author":"Hristo Pandjarov","twitter_card":"summary_large_image","twitter_title":"IMPORTANT: YITH WooCommerce Wishlist Protection Added","twitter_description":"\u0422oday, a serious vulnerability issue with one of the vastly used Yith plugins - the WooCommerce Wishlist was discovered by&nbsp;Sucuri. The latest plugin","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Hristo Pandjarov","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/"},"author":{"name":"Hristo Pandjarov","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390"},"headline":"IMPORTANT: YITH WooCommerce Wishlist Protection Added","datePublished":"2018-01-17T14:24:04+00:00","dateModified":"2025-09-18T14:49:03+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/"},"wordCount":188,"commentCount":7,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist.jpg","articleSection":["Hosting Insights","Product Updates","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/","url":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/","name":"YITH WooCommerce Wishlist Protection Added for our WAF | SiteGround Blog","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist.jpg","datePublished":"2018-01-17T14:24:04+00:00","dateModified":"2025-09-18T14:49:03+00:00","description":"After Sucuri released information about a serious vulnerability in the plugin, our security team quickly released a rule which will help you stay protected!","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2018\/01\/YITH_WooCommerce_Wishlist.jpg","width":1320,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/yith-woocommerce-wishlist-protection-added\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"IMPORTANT: YITH WooCommerce Wishlist Protection Added"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390","name":"Hristo Pandjarov","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","caption":"Hristo Pandjarov"},"sameAs":["https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/hristo\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/10407","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=10407"}],"version-history":[{"count":5,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/10407\/revisions"}],"predecessor-version":[{"id":19906,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/10407\/revisions\/19906"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media\/13039"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=10407"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=10407"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=10407"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}