YITHEMES Vulnerabilities and Affected Products
Vulnerabilities associated with YITH WooCommerce Product Add-Ons.
Products
Clear product- YITH WooCommerce Product Add-Ons5 vulnerabilities
- YITH WooCommerce Wishlist4 vulnerabilities
- YITH Custom Login2 vulnerabilities
- YITH WooCommerce Ajax Search2 vulnerabilities
- YITH WooCommerce Compare2 vulnerabilities
- yith_woocommerce_ajax_search2 vulnerabilities
- yith_woocommerce_gift_cards2 vulnerabilities
- YITH Essential Kit for WooCommerce #11 vulnerability
- YITH PayPal Express Checkout for WooCommerce1 vulnerability
- YITH Slider for page builders1 vulnerability
- YITH WooCommerce Ajax Product Filter1 vulnerability
- YITH WooCommerce Gift Cards1 vulnerability
- YITH WooCommerce Popup1 vulnerability
- YITH WooCommerce Quick View1 vulnerability
- YITH WooCommerce Request A Quote1 vulnerability
- YITH WooCommerce Tab Manager1 vulnerability
- YITH WooCommerce Zoom Magnifier1 vulnerability
- yith_woocommerce_account_funds_premium1 vulnerability
- yith_woocommerce_product_add-ons1 vulnerability
- yith_woocommerce_social_login1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-46635MEDIUM | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerabilityMissing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.2.0. CWE-862Jan 2, 2025 | CVSS5.3v3.1 | EPSS0.35% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-50448HIGH | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.14.1. CWE-79Oct 28, 2024 | CVSS7.1v3.1 | EPSS0.311% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-47367HIGH | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.13.0. CWE-79Oct 6, 2024 | CVSS7.1v3.1 | EPSS0.304% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-35680MEDIUM | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerabilityImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.9.2. | CVSS5.3v3.1 | EPSS0.329% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-27994HIGH | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.5.0. CWE-79Mar 21, 2024 | CVSS7.1v3.1 | EPSS0.398% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |