TI WooCommerce Wishlist

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 26% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ deagleton

   2mo ago

   Tested and wasn’t what we wanted. Template Invaders won’t respond to refund request within refund period. See lots of messages about no support. Wish I hadn’t purchased this plugin.

   Read on wp.org ↗
2. ★★★★★ rayfalconi

   3mo ago

   100% confiable, buen diseno

   Read on wp.org ↗
3. ★★★★★ simieleni2x989xa9h

   3mo ago

   excellent

   Read on wp.org ↗
4. ★★★★★ polyiamond

   6mo ago

   I bought a yearly license – within 6 months they charged me the same fee a second time. I contacted them via email and via their contact form multiple times and did not get any response. There is no way to delete your billing information once you submit it. SCAMMERS. STAY AWAY. I contacted my bank to block all payments from them, it is the only way to avoid getting charged again. I have reported them on Google for fraud and submitted an abuse report to their hosting provider. This topic was modified 4 months, 2 weeks ago by polyiamond. Reason: typo

   Read on wp.org ↗
5. ★★★★★ olyakoskilalala

   7mo ago

   very well

   Read on wp.org ↗
6. ★★★★★ robertotorrescasals

   8mo ago

   Very useful

   Read on wp.org ↗
7. ★★★★★ harrydevries

   8mo ago

   still in localhost so i could not test it in “the wild” but so far so good, very easy to customize (which is important for me) and it works extremely well in the product loop!!

   Read on wp.org ↗
8. ★★★★★ El Sol de la Florida

   11mo ago

   GREAT

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.12.0 Release Date – 25 June 2026 Added : Support for WordPress 7.0.x Added : Support for WooCommerce 10.8.x Fixed : Various PHP compatibility warnings for PHP 7.4-8.4 Updated : Integration with Woo Custom Product Addons plugi 2.12.0
2. — Version 2.11.1 Release Date – 19 November 2025 Added: Support for WooCommerce 10.3.x Fixed: REST API — secure guest wishlist write access using share_key + nonce, enforce owner-only access for user wishlists, update routes, and improve 2.11.1
3. — Version 2.10.0 Release Date – 5 June 2025 Added : Support for WordPress 6.8.x Added : Support for WooCommerce 9.8.x Added : filter ‘tinvwl_wishlist_item_meta_hidden_fields’ Updated : Integration with YITH WooCommerce Product Bundles pl 2.10.0
4. — Version 2.9.2 Release Date – 29 November 2024 Added : Support for WordPress 6.7.x Added : Support for WooCommerce 9.4.x Fixed : issue with early loaded translation for WP 6.7.x Fixed : unauthorized access to the setup wizard page 2.9.2
5. — Version 2.9.1 Release Date – 22 October 2024 Fixed : SQL Injection vulnerability related to multilingual plugins 2.9.1
6. — Version 2.9.0 Release Date – 11 October 2024 Added : Support for WordPress 6.6.x Added : Support for WooCommerce 9.3.x Fixed : SQL Injection vulnerability See the changelog for all versions . 2.9.0

12 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 TI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injection ↗
   2025-12-12 CVE-2025-9207 Improper Input Validation Affects <= 2.10.0 Patched in 2.11.0
2. Medium · 5.3 TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization ↗
   2025-11-21 CVE-2025-67929 Missing Authorization Affects <= 2.10.0 Patched in 2.11.0
3. Medium · 6.5 TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization ↗
   2025-09-22 CVE-2025-58247 Missing Authorization Affects <= 2.10.0 Patched in 2.11.0
4. Critical · 9.8 TI WooCommerce Wishlist <= 2.9.2 - Unauthenticated Arbitrary File Upload ↗
   2025-05-16 CVE-2025-47577 Unrestricted Upload of File with Dangerous Type Affects <= 2.9.2 Patched in 2.10.0
5. Medium · 6.4 TI WooCommerce Wishlist <= 2.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-05-15 CVE-2025-32920 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.10.0 Patched in 2.11.0
6. High · 7.5 TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access ↗
   2024-12-03 CVE-2024-10567 Missing Authorization Affects <= 2.9.1 Patched in 2.9.2
7. High · 7.5 TI WooCommerce Wishlist <= 2.9.0 - Unauthenticated SQL Injection via 'lang' ↗
   2024-09-19 CVE-2024-9156 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.9.0 Patched in 2.9.1
8. Critical · 9.8 TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection ↗
   2024-08-22 CVE-2024-43917 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.8.2 Patched in 2.9.0
9. Critical · 9.8 TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API ↗
   2023-07-31 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 2.7.4 Patched in 2.7.4
10. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.2 Patched in 1.7.0
11. Critical · 9.8 TI WooCommerce Wishlist / TI WooCommerce Wishlist Pro < 1.40.1 - Unauthenticated SQL Injection ↗
    2022-01-31 CVE-2022-0412 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 1.40.1 Patched in 1.40.1
12. High · 8.8 TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update ↗
    2020-10-16 CVE-2020-36725 Missing Authorization Affects <= 1.21.11 Patched in 1.21.12

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 41 languages, 13 at 90% or more

Plus 17 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WCBoost – Wishlist 40K+ installs · 3.6★ · 3 shared tags B
• QODE Wishlist for WooCommerce 10K+ installs · 4.1★ · 3 shared tags B
• WooCommerce 7M+ installs · 4.5★ · 2 shared tags A
• WooCommerce PayPal Payments 800K+ installs · 2.9★ · 2 shared tags B
• WPML Multilingual & Multicurrency for WooCommerce 100K+ installs · 4.1★ · 2 shared tags A
• Mercado Pago payments for WooCommerce 100K+ installs · 3.9★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for TI WooCommerce Wishlist into a readme, a review or a deck. It updates itself.

TI WooCommerce Wishlist: 100K+ active installs, 4.7★ (501 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/ti-woocommerce-wishlist