YITH

Records56All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

YITH records in CISA KEV

No YITH vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yith Woocommerce Product Add-ons 4 records MEDIUM Yith Maintenance Mode 3 records LOW Yith Woocommerce Ajax Search 3 records MEDIUM Yith Woocommerce Gift Cards 3 records HIGH Yith Custom Login 2 records LOW Woocommerce Account Funds 1 record LOW Woocommerce Affiliate 1 record LOW Yith Advanced Refund System For Woocommerce 1 record LOW

Records

2 records in Yith Custom Login · all components

TI-2024-08038 CVE-2024-8665 · GHSA-7fgm-q7w5-rr3c

YITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting

LOW 28

The YITH Custom Login plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.7.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00494 Published 2024-09-13 No fix listed CWE-79

TI-2024-23601 CVE-2024-35732 · GHSA-f9p7-j87r-6fqp

WordPress YITH Custom Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH Custom Login yith-custom-login.This issue affects YITH Custom Login: from n/a through <= 1.7.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00279 Published 2024-06-08 No fix listed CWE-79

Open these records in search →

Critical	5
High	11
Medium	40
Low	0
No CVSS	0