YITHEMES Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

YITH WooCommerce Product Add-Ons5 vulnerabilities
YITH WooCommerce Wishlist4 vulnerabilities
YITH Custom Login2 vulnerabilities
YITH WooCommerce Ajax Search2 vulnerabilities
YITH WooCommerce Compare2 vulnerabilities
yith_woocommerce_ajax_search2 vulnerabilities
yith_woocommerce_gift_cards2 vulnerabilities
YITH Essential Kit for WooCommerce #11 vulnerability
YITH PayPal Express Checkout for WooCommerce1 vulnerability
YITH Slider for page builders1 vulnerability
YITH WooCommerce Ajax Product Filter1 vulnerability
YITH WooCommerce Gift Cards1 vulnerability
YITH WooCommerce Popup1 vulnerability
YITH WooCommerce Quick View1 vulnerability
YITH WooCommerce Request A Quote1 vulnerability
YITH WooCommerce Tab Manager1 vulnerability
YITH WooCommerce Zoom Magnifier1 vulnerability
yith_woocommerce_account_funds_premium1 vulnerability
yith_woocommerce_product_add-ons1 vulnerability
yith_woocommerce_social_login1 vulnerability

YITHEMES vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2025-48111MEDIUM	WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.49.0 - Cross Site Request Forgery (CSRF) vulnerability Cross-Site Request Forgery (CSRF) vulnerability in YITHEMES YITH PayPal Express Checkout for WooCommerce allows Cross Site Request Forgery. This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.49.0. CWE-352Jun 17, 2025	CVSS4.3v3.1	EPSS0.14%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX