Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax

🗓️ 05 Dec 2022 00:00:00Reported by wpvulndbType

YITH WooCommerce plugins CSRF vulnerabilit

Reporter	Title	Published	Views	Family All 2
Patchstack	WordPress YITH WooCommerce Product Slider Carousel Plugin <= 1.16.0 is vulnerable to Cross Site Request Forgery (CSRF)	3 Mar 202300:00	–	patchstack
CVE	CVE-2022-44630	5 Jan 202316:15	–	cve

Vulners

Node

yithemes yith_woocommerce_wishlistRange<3.15.0wordpress

yithemes yith_woocommerce_compareRange<2.20.1wordpress

yithemes yith_woocommerce_quick_viewRange<1.21.1wordpress

multivendorx product_catalog_mode_for_woocommerceRange<2.16.1wordpress

yithemes yith_woocommerce_order_trackingRange<2.8.0wordpress

yithemes yith_essential_kit_for_woocommerceRange<2.14.0wordpress

-yith-infinite-scrollingRange<1.8.0

Source	Link
blog	www.blog.sucuri.net/2022/12/wordpress-vulnerability-patch-roundup-december-2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Dec 2022 00:00Current

3.7Low risk

Vulners AI Score3.7