Read the docs

YITH

Records56All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

YITH records in CISA KEV

No YITH vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Yith Woocommerce Product Add-ons 4 records MEDIUM Yith Maintenance Mode 3 records LOW Yith Woocommerce Ajax Search 3 records MEDIUM Yith Woocommerce Gift Cards 3 records HIGH Yith Custom Login 2 records LOW Woocommerce Account Funds 1 record LOW Woocommerce Affiliate 1 record LOW Yith Advanced Refund System For Woocommerce 1 record LOW

Records

3 records in Yith Maintenance Mode · all components

TI-2021-14943 CVE-2021-36845 · GHSA-ppc5-qvp7-3j6h

Cross-site scripting in YITH Maintenance Mode

Priority LOW 32

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.8, there are 46 vulnerable parameters that were missed by the vendor while patching the…

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00715 Published 2021-09-27 No fix listed CWE-79
Open these records in search →