Yith Woocommerce Product Add-ons Security Vulnerabilities and Issues — Yith Woocommerce Product Add-ons CVE List

YithemesYith Woocommerce Product Add-ons

4 matches found

CVE•added 2019/10/31 4:09 p.m.•134 views

CVE-2019-16251

CVE-2019-16251 affects the YIT Plugin Framework (plugin-fw/lib/yit-plugin-panel-wc.php) up to version 3.3.8 used by WordPress plugins, allowing authenticated users to change plugin options. Connected sources confirm this affects multiple YITH plugins (Order Tracking, Custom Thank You Page for Woo...

4.3CVSS4.4AI score0.00948EPSS

Save

CVE•added 2024/10/28 5:56 p.m.•85 views

CVE-2024-50448

CVE-2024-50448 affects YITH WooCommerce Product Add-Ons (

7.1CVSS5.9AI score0.00308EPSS

Save

CVE•added 2023/12/31 10:11 a.m.•82 views

CVE-2023-49777

CVE-2023-49777 – YITH WooCommerce Product Add-Ons suffers a Deserialization of Untrusted Data vulnerability (Affects: 4.3.0 and earlier). Root cause: untrusted data deserialization in the plugin. Impact/ exploitation details are not provided beyond deserialization risk in the connected Red Hat en...

9.1CVSS8.5AI score0.0069EPSS

Save

CVE•added 2024/06/10 3:48 p.m.•71 views

CVE-2024-35680

CVE-2024-35680 applies to YITH WooCommerce Product Add-Ons for WordPress, affecting versions up to 4.9.2. The issue is described as Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection), enabling Code Injection. The Red Hat advisory confirms the same des...

5.3CVSS5.9AI score0.00329EPSS

Save