A vulnerability marked as critical has been reported in QODE Wishlist for WooCommerce Plugin up to 1.2.7 on WordPress. This issue affects the function
qode_wishlist_for_woocommerce_wishlist_table_item_callback. Performing manipulation results in improper control of resource identifiers.
This vulnerability is known as CVE-2025-13157. Remote exploitation of the attack is possible. No exploit is available.