Records56All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9
Exploited now
YITH records in CISA KEVNo YITH vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Yith Advanced Refund System For Woocommerce · all components
Priority LOW 22
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00948 · Published 2019-10-31 · No fix listed
Open these records in search →