YITHEMES Vulnerabilities and Affected Products
Vulnerabilities associated with YITH WooCommerce Request A Quote.
Products
Clear product- YITH WooCommerce Product Add-Ons5 vulnerabilities
- YITH WooCommerce Wishlist4 vulnerabilities
- YITH Custom Login2 vulnerabilities
- YITH WooCommerce Ajax Search2 vulnerabilities
- YITH WooCommerce Compare2 vulnerabilities
- yith_woocommerce_ajax_search2 vulnerabilities
- yith_woocommerce_gift_cards2 vulnerabilities
- YITH Essential Kit for WooCommerce #11 vulnerability
- YITH PayPal Express Checkout for WooCommerce1 vulnerability
- YITH Slider for page builders1 vulnerability
- YITH WooCommerce Ajax Product Filter1 vulnerability
- YITH WooCommerce Gift Cards1 vulnerability
- YITH WooCommerce Popup1 vulnerability
- YITH WooCommerce Quick View1 vulnerability
- YITH WooCommerce Request A Quote1 vulnerability
- YITH WooCommerce Tab Manager1 vulnerability
- YITH WooCommerce Zoom Magnifier1 vulnerability
- yith_woocommerce_account_funds_premium1 vulnerability
- yith_woocommerce_product_add-ons1 vulnerability
- yith_woocommerce_social_login1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-24366MEDIUM | WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerabilityMissing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through <= 2.46.0. CWE-862Jan 22, 2026 | CVSS5.3v3.1 | EPSS0.187% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |