The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to a security issue called SQL Injection. This security issue affects versions up to, and including, 2.1.2 of the plugin. It allows attackers with subscriber level permissions and above to view sensitive information from the database. The security issue is caused by insufficient escaping of a user supplied parameter and lack of preparation for an existing SQL query.