CVE-2026-28169WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Zoom Magnifier Published 08/06/2026 Severity Medium CVE-2026-22333WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Compare Published 02/19/2026 Severity High CVE-2026-24366WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Request A Quote Published 01/22/2026 Severity Medium CVE-2025-68581WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Y YITH Slider for page builders Published 12/24/2025 Severity Medium CVE-2025-8617YITH WooCommerce Quick View <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Quick View Published 12/13/2025 Severity Medium CVE-2025-12427YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Wishlist Published 11/19/2025 Severity Medium CVE-2025-12777YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Wishlist Published 11/19/2025 Severity Medium CVE-2025-54675WordPress YITH WooCommerce Popup Plugin plugin <= 1.48.0 - Cross Site Request Forgery (CSRF) Vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Popup Published 08/14/2025 Severity Medium CVE-2025-48111WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.49.0 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product Y YITH PayPal Express Checkout for WooCommerce Published 06/17/2025 Severity Medium CVE-2025-5238YITH WooCommerce Wishlist <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Wishlist Published 06/14/2025 Severity Medium CVE-2023-46635WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Product Add-Ons Published 01/02/2025 Severity Medium CVE-2023-36506WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Waiting List Published 12/13/2024 Severity Medium CVE-2024-50448WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Product Add-Ons Published 10/28/2024 Severity High CVE-2024-47350WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Ajax Search Published 10/06/2024 Severity Critical CVE-2024-47367WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Product Add-Ons Published 10/06/2024 Severity High CVE-2024-7846YITH WooCommerce Ajax Search < 2.7.1 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product Y YITH WooCommerce Ajax Search Published 09/23/2024 Severity Medium CVE-2024-8665YITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting Exploitation status Not known exploited Fix Affected product Y YITH Custom Login Published 09/13/2024 Severity Medium CVE-2024-37943WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Ajax Product Filter Published 07/20/2024 Severity Medium CVE-2024-6799YITH Essential Kit for WooCommerce #1 <= 2.34.0 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install, Activation, and Deactivation Exploitation status Not known exploited Fix Affected product Y YITH Essential Kit for WooCommerce #1 Published 07/19/2024 Severity Medium CVE-2024-35680WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Product Add-Ons Published 06/10/2024 Severity Medium CVE-2024-30470WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Account Funds Premium Published 06/09/2024 Severity Medium CVE-2024-35698WordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Tab Manager Published 06/08/2024 Severity Medium CVE-2024-35732WordPress YITH Custom Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Y YITH Custom Login Published 06/08/2024 Severity Medium CVE-2024-34385WordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Wishlist Published 06/03/2024 Severity Medium CVE-2024-4455YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Ajax Search Published 05/24/2024 Severity High CVE-2024-0870YITH WooCommerce Gift Cards <= 4.12.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Gift Cards Published 05/14/2024 Severity Medium CVE-2024-32699WordPress YITH WooCommerce Compare plugin <= 2.37.0 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Compare Published 04/24/2024 Severity Medium CVE-2024-27994WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Product Add-Ons Published 03/21/2024 Severity High CVE-2023-49777WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection Exploitation status Not confirmed Fix Affected product Y YITH WooCommerce Product Add-Ons Published 12/31/2023 Severity Critical CVE-2022-45359WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload Exploitation status Not known exploited Fix Affected product Y YITH WooCommerce Gift Cards Published 12/06/2022 Severity Critical CVE-2022-0818Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS Exploitation status Not confirmed Fix Affected product W WooCommerce Affiliate Plugin – Coupon Affiliates Published 03/28/2022 Severity Unknown CVE-2021-36845YITH Maintenance Mode (WordPress plugin) <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities Exploitation status Not known exploited Fix Affected product Y YITH Maintenance Mode (WordPress plugin) Published 09/27/2021 Severity Medium CVE-2021-36841YITH Maintenance Mode (WordPress plugin) <= 1.3.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability. Exploitation status Not known exploited Fix Affected product Y YITH Maintenance Mode (WordPress plugin) Published 09/27/2021 Severity Medium CVE-2021-3120Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 02/22/2021 Severity Critical CVE-2019-16251Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 10/31/2019 Severity Unknown CVE-2015-9429Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 09/26/2019 Severity Unknown 
.svg){kind=icon}
