Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/09 9:17 a.m.•9 views

CVE-2026-14359

The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the adduserinwaitinglist function registered on the wpajaxyithwcwtladduser action being missing both a capability check and a nonce verificatio...

8.8CVSS0.00239EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/09 8:28 a.m.•10 views

EUVD-2026-74774

The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the adduserinwaitinglist function registered on the wpajaxyithwcwtladduser action being missing both a capability check and a nonce verificatio...

8.8CVSS5.7AI score0.00239EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/09 8:28 a.m.•34 views

CVE-2026-14359

The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3.35.0 . The root cause is the add_user_in_waiting_list() function, registered on the wp_ajax_yith_wcwtl_add_user action, which lacks both a capability check and nonce ...

8.8CVSS5.7AI score0.00239EPSS
SaveIn wildExploits0References2
Cvelist
Cvelist
•added 2026/09/09 8:28 a.m.•38 views

CVE-2026-14359 YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user

The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the adduserinwaitinglist function registered on the wpajaxyithwcwtladduser action being missing both a capability check and a nonce verificatio...

8.8CVSS0.00239EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-88896

The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the add user in waiting list function registered on the wp ajax yith wcwtl add user action being missing both a capability check and a nonce...

8.8CVSS5.7AI score0.00239EPSS
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
•added 2026/09/09 12:00 a.m.•9 views

VulnCheck KEV: CVE-2026-14359

The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the adduserinwaitinglist function registered on the wpajaxyithwcwtladduser action being missing both a capability check and a nonce verificatio...

8.8CVSS5.7AI score0.00239EPSS
SaveIn wildExploits0References2
Rows per page
Query Builder