YITH WooCommerce Gift Cards vulnerabilities | LiveThreat CVE Feed

Product

YITH WooCommerce Gift Cards

by yithemes · last CVE May 14, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 2High 0Medium 2Low 0

Severity

Exploitation

Watch

Add YITH WooCommerce Gift Cards to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-45359	9.8	14%	Dec 6	WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload Affected: through 3.19.0
CVE-2021-3120	9.8	37%	Feb 22	An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the… Affected: before 3.3.1
CVE-2024-0870	5.3	1%	May 14	YITH WooCommerce Gift Cards <= 4.12.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update Affected: through 4.12.0
CVE-2019-16251	4.3	1%	Oct 31	plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes Affected: through 1.3.7