Read the docs

YITH

Records56All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

YITH records in CISA KEV

No YITH vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Yith Woocommerce Product Add-ons 4 records MEDIUM Yith Maintenance Mode 3 records LOW Yith Woocommerce Ajax Search 3 records MEDIUM Yith Woocommerce Gift Cards 3 records HIGH Yith Custom Login 2 records LOW Woocommerce Account Funds 1 record LOW Woocommerce Affiliate 1 record LOW Yith Advanced Refund System For Woocommerce 1 record LOW

Records

1 record in Woocommerce Affiliate · all components

TI-2022-00725 CVE-2022-0818 · GHSA-cmrq-4p99-j6hr

Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS

Priority LOW 29

The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated atta…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00866 Published 2022-03-28 Fixed in 4.16.4.5 CWE-79
Open these records in search →