Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: YITH Component: Yith Woocommerce Product Add-ons Clear all filters
TI-2024-33880 CVE-2024-50448 · GHSA-mm7p-v4m8-8xqp

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-10-28 No fix listed CWE-79
TI-2024-23549 CVE-2024-35680 · GHSA-jjqh-vpv3-5xwj

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability

Priority LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-On…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00329 Published 2024-06-10 No fix listed CWE-80