YITH

Records56All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

YITH records in CISA KEV

No YITH vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yith Woocommerce Product Add-ons 4 records MEDIUM Yith Maintenance Mode 3 records LOW Yith Woocommerce Ajax Search 3 records MEDIUM Yith Woocommerce Gift Cards 3 records HIGH Yith Custom Login 2 records LOW Woocommerce Account Funds 1 record LOW Woocommerce Affiliate 1 record LOW Yith Advanced Refund System For Woocommerce 1 record LOW

Records

4 records in Yith Woocommerce Product Add-ons · all components

TI-2023-27187 CVE-2023-49777 · GHSA-q9xv-v8rv-88gm

WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection

MEDIUM 40

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0069 Published 2023-12-31 No fix listed CWE-502

TI-2024-33880 CVE-2024-50448 · GHSA-mm7p-v4m8-8xqp

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-10-28 No fix listed CWE-79

TI-2024-23549 CVE-2024-35680 · GHSA-jjqh-vpv3-5xwj

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability

LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-On…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00329 Published 2024-06-10 No fix listed CWE-80

TI-2019-12233 CVE-2019-16251 · GHSA-rph9-hxwg-j95q

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for…

LOW 22

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00948 Published 2019-10-31 No fix listed

Open these records in search →