Login Request a demo
YW
Product
YITH WooCommerce Product Add-Ons
by YITHEMES · last CVE Jan 2, 2025
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 3Medium 4Low 0
Severity
All severities7Critical0High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add YITH WooCommerce Product Add-Ons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-49777
8.8
1%
Dec 31
WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection
Affected: through 4.3.0
CVE-2024-47367
7.1
0%
Oct 6
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 4.13.0
CVE-2024-27994
7.1
0%
Mar 21
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.5.0
CVE-2024-50448
6.1
0%
Oct 28
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 4.14.1
CVE-2023-46635
5.3
0%
Jan 2
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability
Affected: through 4.2.0
CVE-2024-35680
5.3
0%
Jun 10
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability
Affected: through 4.9.2
CVE-2019-16251
4.3
1%
Oct 31
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes
Affected: through 1.5.21
Showing 7