YW
Product
YITH WooCommerce Product Add-Ons
8
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 5Low 0
Watch
Add YITH WooCommerce Product Add-Ons to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50448 | 6.1 | Oct 28 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 4.14.1 |
| CVE-2026-107868 New | 5.3 | Oct 30 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability Affected: through 4.34.0 |
| CVE-2023-46635 | 5.3 | Jan 2 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability Affected: through 4.2.0 |
| CVE-2024-35680 | 5.3 | Jun 10 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability Affected: through 4.9.2 |
| CVE-2019-16251 | 4.3 | Oct 31 | plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes Affected: through 1.5.21 |
Showing 5