YITH WooCommerce Ajax Search <= 2.4.0 - Cross-Site Scripting

The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'queryString' parameter in the REST API endpoint /ywcas/v1/register in versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. id: CVE-2024-4455 info...

CVE-2026-107868

Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons = 4.34.0 versions...

CVE-2026-107868 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons = 4.34.0 versions...

EUVD-2026-114299

Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons = 4.34.0 versions...

CVE-2026-107868

The YITH WooCommerce Product Add-Ons plugin for WordPress (versions

CVE-2026-107868: YITHEMES YITH WooCommerce Product Add-Ons: Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions.

Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons = 4.34.0 versions...

CVE-2026-27401

Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.62.0...

CVE-2026-27401

The YITH PayPal Express Checkout for WooCommerce plugin (versions n/a through 1.62.0 ) is vulnerable to a Broken Access Control issue due to Missing Authorization . This flaw allows for the exploitation of incorrectly configured access control security levels. While the vulnerability is documente...

CVE-2026-27401 WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.62.0...

EUVD-2026-112750

Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.62.0...

WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Luke Schneider in WordPress Plugin YITH PayPal Express Checkout for WooCommerce versions = 1.62.0...

CVE-2026-112199

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Wishlist yith-woocommerce-wishlist allows Stored XSS.This issue affects YITH WooCommerce Wishlist: from n/a through 4.18.1...

CVE-2026-111845

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...

EUVD-2026-104260

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...

CVE-2026-111845 WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...

CVE-2026-111845

The YITH WooCommerce Product Bundles plugin for WordPress (versions up to and including 2.29.0 ) is affected by a Missing Authorization vulnerability. This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels , as the plugin fails to properly enforce authorization chec...

CVE-2026-111845 WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...

WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ratchanon Chamnankit in WordPress Plugin YITH WooCommerce Product Bundles versions = 2.29.0...

CVE-2026-112199

The YITH WooCommerce Wishlist plugin for WordPress (versions

CVE-2026-112199 WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Wishlist yith-woocommerce-wishlist allows Stored XSS.This issue affects YITH WooCommerce Wishlist: from n/a through 4.18.1...