Productive Commerce – Wishlist, Compare & MiniCart
Productive Commerce – Wishlist, Compare & MiniCart has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 1 is fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 5.9, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include SQL Injection.
1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. Productive Commerce – Wishlist, Compare & MiniCart is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-47657Productive Commerce <= 1.1.22 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records

Productive Commerce – Wishlist, Compare & MiniCart
Author
Productive Minds
Productive Commerce augments WooCommerce with multiple e-commerce features, including Wishlist, Product Comparison, Quick View, and Mini-Cart. This plugin is designed to enhance e-commerce websites by boosting conversion rates, streamlining the shopping journey, and fostering customer loyalty through improved customer interaction, engagement, and decision-making. Why Choose Productive Commerce? Enhance WooCommerce functionalities, optimizing user interactions and shopping experience. Seamlessly add products to Wishlist from any catalog and product page. Easily add products to Comparison from catalogs and product page. Facilitate side-by-side product comparisons. Global site access to Mini Cart & Mini Wishlist popups. Share Wishlist and Comparison pages easily through social media and email. Comprehensive branding tools including Elementor widgets and Gutenberg blocks. Consistent user experience across popups, buttons, and pages for Wishlist, Comparison, Quick View, and MiniCart. The exact variations chosen for variable products are represented accurately in Wishlist and Comparison pages. Provide real-time updates with synchronized notification icons for status alerts. Notable Pro-Only Features Analytics – Manage data easily using the built-in wishlist management dashboard in WordPress. Gain deep insights into how guests and registered customers interact with the wishlist. Understand customer journeys by identifying which pages drive wishlist activity. Identify sales leads by uncovering the cart value of customer wishlists. Re-engage customers by identifying empty wishlists for targeted action. Forecast inventory using live wishlist data and real-time stock levels. Increase retention with always-accessible Mini-Wishlist popups. Increase retention with always-accessible Mini-Comparison popups. **Manage product quantities in the wishlist and comparison. Maintain brand consistency with custom Elementor widgets and Gutenberg blocks. Quick View explore product details and swiftly add items to the cart from catalog and shop pages. Plugin Pages Complete plugin description Live Demo Documentation Customer Support Plugin Features The highlighted features on this page are only a subset of the plugin’s features. A comprehensive feature list can be found on the plugin’s page here. Check out the Free vs Pro section for a detailed comparison of both versions. 👉 Main functionalities in FREE edition – Mini Cart (all features) – Wishlist (limited functionality) – Product Comparison (limited functionality) 👉 Main functionalities in Pro edition only – Wishlist (all features) – Product Comparison (all features) – Mini Cart (all features) – Quick View (all features) 👉 Full product details and Free vs Pro comparison For a complete list of features, visit the plugin’s page here. For an in-depth comparison between the two versions, see the Free vs Pro section. Attribution swiperjs, The Most Modern Mobile Touch Slider https://github.com/nolimits4web/swiper License: MIT Licensed License URL: https://github.com/nolimits4web/swiper?tab=MIT-1-ov-file
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C