Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

379 matches found

CVE
CVE•added 2026/05/07 7:35 a.m.•20 views

CVE-2026-27329

The CVE concerns WordPress YITH WooCommerce Wishlist plugin (versions

5.3CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/05/07 7:34 a.m.•10 views

WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by PPzzAArr in WordPress Plugin YITH WooCommerce Wishlist versions = 4.12.0...

5.3CVSS5.8AI score0.00315EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD•added 2026/05/07 12:0 a.m.•13 views

WordPress plugin YITH WooCommerce Wishlist 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/05/07 12:0 a.m.•20 views

PT-2026-38357

Name of the Vulnerable Software and Affected Versions YITH WooCommerce Wishlist versions prior to 4.12.0 Description An authorization bypass exists due to a user-controlled key, which allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a...

5.3CVSS5.8AI score0.00315EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB•added 2026/04/10 6:0 a.m.•2 views

CVE-2026-4432

The YITH WooCommerce Wishlist WordPress plugin before 4.13.0 does not properly validate wishlist ownership in the savetitle AJAX handler before allowing wishlist renaming operations. The function only checks for a valid nonce, which is publicly exposed in the page source of the /wishlist/ page,...

5.9AI score0.00226EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/04/10 12:0 a.m.•9 views

WordPress plugin YITH WooCommerce Wishlist 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

6.5CVSS5.9AI score0.00226EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2026/02/20 1:26 p.m.•6 views

CVE-2026-22333

Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: from n/a through = 3.6.0...

7.2CVSS5.5AI score0.00469EPSS
SaveExploits0References1
NVD
NVD•added 2026/02/19 9:16 a.m.•6 views

CVE-2026-22333

Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: from n/a through = 3.6.0...

7.2CVSS0.00469EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/19 8:26 a.m.•33 views

CVE-2026-22333 WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: from n/a through = 3.6.0...

7.2CVSS0.00469EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/02/19 8:26 a.m.•3 views

CVE-2026-22333 WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: from n/a through = 3.6.0...

7.2CVSS5.4AI score0.00469EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/19 8:26 a.m.•15 views

CVE-2026-22333

CVE-2026-22333 affects the WordPress plugin YITH WooCommerce Compare (YITH WooCommerce Compare, versions from unknown start through

7.2CVSS5.5AI score0.00469EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/02/19 12:0 a.m.•7 views

PT-2026-20657

Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: from n/a through = 3.6.0...

5.5AI score0.00469EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2026/01/23 9:15 p.m.•10 views

CVE-2026-24366

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.3CVSS5.4AI score0.00187EPSS
SaveExploits0References1
NVD
NVD•added 2026/01/22 5:16 p.m.•10 views

CVE-2026-24366

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.3CVSS0.00187EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/01/22 4:52 p.m.•31 views

CVE-2026-24366 WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.3CVSS0.00187EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/01/22 12:0 a.m.•9 views

WordPress plugin YITH WooCommerce Request A Quote has a security vulnerability.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/01/22 12:0 a.m.•15 views

PT-2026-4258

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through = 2.46.0...

5.4AI score0.00187EPSS
SaveExploits0References2
Patchstack
Patchstack•added 2026/01/09 5:32 p.m.•8 views

WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by PPzzAArr in WordPress Plugin YITH WooCommerce Request A Quote versions = 2.46.0...

5.3CVSS5.4AI score0.00187EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE•added 2026/01/09 8:59 a.m.•8 views

CVE-2023-49777

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0...

9.1CVSS8.5AI score0.0069EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2025/12/24 7:33 p.m.•7 views

WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin YITH Slider for page builders versions = 1.0.11...

8.1CVSS6.7AI score0.00174EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder