CVE-2019-16251
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress...
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
- Record
CVE-2019-16251- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
- Record
CVE-2019-16251- Updated
- 2026-11-02
EUVDEUVD-2019-7057 No score
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
- Record
EUVD-2019-7057- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rph9-hxwg-j95q No score
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress...
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
- Record
GHSA-rph9-hxwg-j95q- Updated
- 2026-11-02
Affected products
- yithemes yith advanced refund system for woocommerce
- yithemes yith color and label variations for woocommerce
- yithemes yith custom thank you page for woocommerce
- yithemes yith desktop notifications for woocommerce
- yithemes yith paypal express checkout for woocommerce
- yithemes yith pre-order for woocommerce
- yithemes yith product size charts for woocommerce
- yithemes yith woocommerce added to cart popup
- yithemes yith woocommerce advanced reviews
- yithemes yith woocommerce affiliates
- yithemes yith woocommerce ajax search
- yithemes yith woocommerce authorize.net payment gateway
Show 26 moreShow less
- yithemes yith woocommerce badge management
- yithemes yith woocommerce best sellers
- yithemes yith woocommerce brands add-on
- yithemes yith woocommerce bulk product editing
- yithemes yith woocommerce cart messages
- yithemes yith woocommerce compare
- yithemes yith woocommerce frequently bought together
- yithemes yith woocommerce gift cards
- yithemes yith woocommerce mailchimp
- yithemes yith woocommerce multi-step checkout
- yithemes yith woocommerce multi vendor
- yithemes yith woocommerce order tracking
- yithemes yith woocommerce pdf invoice and shipping list
- yithemes yith woocommerce points and rewards
- yithemes yith woocommerce product add-ons
- yithemes yith woocommerce product bundles
- yithemes yith woocommerce questions and answers
- yithemes yith woocommerce quick view
- yithemes yith woocommerce recover abandoned cart
- yithemes yith woocommerce request a quote
- yithemes yith woocommerce social login
- yithemes yith woocommerce stripe
- yithemes yith woocommerce subscription
- yithemes yith woocommerce waiting list
- yithemes yith woocommerce wishlist
- yithemes yith woocommerce zoom magnifier
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-16251 is a medium vulnerability (CVSS 4.3) in Yithemes Yith Advanced Refund System For Woocommerce, published October 31, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. No source names a fixed version.