YITH

Records56All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

YITH records in CISA KEV

No YITH vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yith Woocommerce Product Add-ons 4 records MEDIUM Yith Maintenance Mode 3 records LOW Yith Woocommerce Ajax Search 3 records MEDIUM Yith Woocommerce Gift Cards 3 records HIGH Yith Custom Login 2 records LOW Woocommerce Account Funds 1 record LOW Woocommerce Affiliate 1 record LOW Yith Advanced Refund System For Woocommerce 1 record LOW

Records

1 record in Woocommerce Account Funds · all components

TI-2024-20196 CVE-2024-30470 · GHSA-x9c8-674p-vmp9

WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through 1.33.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00384 Published 2024-06-09 No fix listed CWE-862

Open these records in search →

Critical	5
High	11
Medium	40
Low	0
No CVSS	0