Vendors / YITH Records 56 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 11
Exploited now YITH records in CISA KEV No YITH vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 68
An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.36781 · Published 2021-02-22 · No fix listed CWE-434
Priority MEDIUM 64
Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.13514 · Published 2022-12-06 · No fix listed CWE-434
Priority LOW 22
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00948 · Published 2019-10-31 · No fix listed
Open these records in search → All records by CVSS severity
5 11 40 0 0
