Skip to content

Yith vulnerabilities

Products

Newest

yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 more WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability CVE-2026-107868 5.3 MediumOctober 30, 2026
yith paypal express checkout for woocommerce, yithemes yith paypal express checkout for woocommerce +1 more WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability CVE-2026-27401 5.3 MediumOctober 29, 2026
yith woocommerce product bundles WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability CVE-2026-111845 5.3 MediumOctober 19, 2026
yith woocommerce wishlist WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-112199 6.5 MediumOctober 19, 2026
yith paypal express checkout for woocommerce, yithemes yith paypal express checkout for woocommerce +1 more WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability CVE-2026-111409 5.3 MediumOctober 16, 2026
yith woocommerce compare WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-106604 6.5 MediumOctober 15, 2026
yith woocommerce product add-ons WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability CVE-2026-66480 5.3 MediumOctober 10, 2026
yith woocommerce affiliates WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability CVE-2026-106606 7.2 HighOctober 10, 2026
yith woocommerce product bundles WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability CVE-2026-105878 5.3 MediumOctober 8, 2026
yith woocommerce tab manager, yithemes yith woocommerce tab manager +1 more WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-97292 6.5 MediumSeptember 30, 2026
yith woocommerce request a quote, yithemes yith woocommerce request a quote +1 more WordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-95602 6.5 MediumSeptember 23, 2026
unknown yith woocommerce wishlist, yith woocommerce wishlist +1 more YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title CVE-2026-82305 5.3 MediumSeptember 11, 2026
yith woocommerce waitlist premium YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user CVE-2026-14359 8.8 HighSeptember 9, 2026
yith request a quote for woocommerce premium WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerability CVE-2026-84238 9.8 CriticalSeptember 3, 2026
yith woocommerce membership premium WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability CVE-2026-32552 8.5 HighAugust 19, 2026
yith woocommerce product slider carousel WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF) CVE-2022-44630 4.6 MediumJune 11, 2026
yith woocommerce product add-ons WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability CVE-2026-42383 7.6 HighMay 20, 2026
yith woocommerce wishlist WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-27329 5.3 MediumMay 7, 2026
unknown yith woocommerce wishlist, yith woocommerce wishlist +1 more YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR CVE-2026-4432 6.5 MediumApril 10, 2026
yith woocommerce compare, yithemes yith woocommerce compare +1 more WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability CVE-2026-22333 7.2 HighFebruary 19, 2026
yith woocommerce wishlist, yithemes yith woocommerce wishlist +1 more YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename CVE-2025-12427 5.3 MediumNovember 19, 2025
yith woocommerce wishlist, yithemes yith woocommerce wishlist +1 more YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion CVE-2025-12777 5.3 MediumNovember 19, 2025
yith woocommerce wishlist, yithemes yith woocommerce wishlist +1 more YITH WooCommerce Wishlist <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CVE-2025-5238 6.4 MediumJune 14, 2025
yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 more WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability CVE-2023-46635 5.3 MediumJanuary 2, 2025
yith woocommerce waiting list WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability CVE-2023-36506 5.3 MediumDecember 13, 2024
yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 more WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-50448 7.1 HighOctober 28, 2024
yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 more WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-47367 7.1 HighOctober 6, 2024
yith woocommerce ajax product filter, yithemes yith woocommerce ajax product filter +1 more WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37943 5.8 MediumJuly 20, 2024
yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 more WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability CVE-2024-35680 5.3 MediumJune 10, 2024
yith woocommerce account funds premium, yithemes woocommerce account funds, yith woocommerce account funds premium +2 more WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerability CVE-2024-30470 6.5 MediumJune 9, 2024
yith woocommerce tab manager, yithemes yith woocommerce tab manager +1 more WordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-35698 5.9 MediumJune 8, 2024
yith woocommerce wishlist, yithemes yith woocommerce wishlist +1 more WordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-34385 5.9 MediumJune 3, 2024
yith woocommerce gift cards, yithemes yith woocommerce gift cards +1 more YITH WooCommerce Gift Cards <= 4.12.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update CVE-2024-0870 5.3 MediumMay 14, 2024
wordpress yith woocommerce compare, yith woocommerce compare +1 more WordPress YITH WooCommerce Compare plugin <= 2.37.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32699 4.3 MediumApril 24, 2024
yith woocommerce gift cards premium WordPress YITH WooCommerce Gift Cards Premium plugin <= 3.23.1 - Unauth. Gift Card Creation Leading to Stored XSS vulnerability CVE-2022-44633 6.5 MediumMarch 21, 2024
yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 more WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-27994 7.1 HighMarch 21, 2024
yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 more WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection CVE-2023-49777 9.1 CriticalDecember 31, 2023
yith woocommerce gift cards, yithemes yith woocommerce gift cards +1 more WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload CVE-2022-45359 EPSS 13.5% 9.8 CriticalDecember 6, 2022
yith maintenance mode (wordpress plugin), yithemes yith maintenance mode +1 more YITH Maintenance Mode (WordPress plugin) <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities CVE-2021-36845 6.9 MediumSeptember 27, 2021
yith maintenance mode (wordpress plugin), yithemes yith maintenance mode +1 more YITH Maintenance Mode (WordPress plugin) <= 1.3.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability. CVE-2021-36841 6.9 MediumSeptember 27, 2021