NM Gift Registry and Wishlist Lite

NM Gift Registry and Wishlist Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for NM Gift Registry and Wishlist Lite has a vendor fix available, so running the current release closes it.

All of these findings were reported by Legion Hunter. NM Gift Registry and Wishlist Lite is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all NM Gift Registry and Wishlist Lite vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-39588

NM Gift Registry and Wishlist Lite <= 5.13 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
NM Gift Registry and Wishlist Lite banner
Latestv5.15.1

NM Gift Registry and Wishlist Lite

nmerii

Author

nmerii

4.9(25)
98/100
Last Updated
2026-06-21 (2mo ago)
Active Installs
200+
Downloads
31,800
Requires WP
5.8+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2020-04-12 (6y ago)
Requires Plugins
woocommerce

NM Gift Registry and Wishlist for WOOCOMMERCE allows customers to create and add products to all kinds of gift registries and wishlists, from birthdays to weddings, anniversaries and other occasions. It can create both gift registries and wishlists. Designed with customers in mind, It provides tools needed to help them create the perfect list, get their items bought and generate sales for the store. Free version features Create a gift registry or wishlist. Allow guests to create and manage wishlists. Add event date, description, partner’s details and other profile information to the gift registry or wishlist. Add shipping information to the gift registry or wishlist using WooCommerce’s shipping fields to blend well with the shipping setup on your site. Add simple, variable or grouped products directly to the gift registry or wishlist without fuss. Set the quantity desired of products added to the gift registry or wishlist. Add products from multiple gift registries or wishlists to the same cart and even add the same products to the cart as normal items. Track gift registry or wishlist items in the cart individually all the way up to checkout and order. Blocks and shortcodes for displaying wishlists, archives, add to wishlist button, wishlist cart and search form. Customize the appearance and position of the add to gift registry or wishlist button. Customize the wishlist items table, add or remove columns as necessary, sort columns in every way. Social sharing for the gift registry or wishlist. Advanced search form for searching gift registries or wishlists by title, name, email and other fields. Pro version features Ability for each customer to have multiple gift registries or wishlists. Add multiple wishlist items to the cart at once. WooCommerce-like emails configurable to be sent to custom recipients and the wishlist owner at various stages such as when a wishlist is created, fulfilled and deleted, and when a wishlist item is ordered, purchased and refunded. Featured and background images for each gift registry or wishlist with various display styles. Ability to send custom messages to the gift registry or wishlist owner from the checkout page. Messages inbox for customers to view messages sent to them on the checkout page from their account area. Configure sending messages to customers’ email. Settings for customers to manage the visibility and other properties of their gift registry or wishlist on the frontend. Ability to exclude individual wishlists from search results. Ability to mark an item as favourite in the wishlist and sort items by their favourite status. Extra settings for customizing the add to wishlist button and action completely to your liking. Extra setting for customizing plugin functionality. Ability to set separate shipping methods and rates for wishlist items and ability to ship wishlist items to the wishlist owner’s address. Ability to hide or customize the wishlist owner’s shipping address on the frontend when shipping to it. Ability to include/exclude products from being added to the wishlist. Ability to include/exclude product categories from being added to the wishlist. Allow wishlist owners to see details of who bought items for them.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C