Vendor

    YITH

    22 known vulnerabilities in products by YITH, 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in YITH
    CriticalCVE-2022-45359

    YITH WooCommerce Gift Cards: Unrestricted Upload of File with Dangerous Type

    also in 1 other product

    		9.8
    CriticalCVE-2026-84238

    YITH Request a Quote for WooCommerce Premium: Missing Authorization

    		9.8
    HighCVE-2026-14359

    YITH WooCommerce Waitlist Premium: Improper Privilege Management

    		8.8
    HighCVE-2026-32552

    WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability

    		8.5
    HighCVE-2026-106606

    WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

    		7.2
    CriticalCVE-2023-49777

    WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection

    also in 1 other product

    		9.1
    MediumCVE-2026-95602

    YITH WooCommerce Request A Quote: Authorization Bypass Through User-Controlled Key

    		6.5
    MediumCVE-2026-106604

    WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-112199

    WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2026-42383

    WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability

    		7.6
    MediumCVE-2026-27401

    YITH PayPal Express Checkout for WooCommerce: Missing Authorization

    		5.3
    MediumCVE-2021-36845

    YITH Maintenance Mode (WordPress plugin): Cross-site Scripting

    also in 1 other product

    		6.9
    MediumCVE-2026-66480

    WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability

    		5.3
    MediumCVE-2026-111409

    YITH PayPal Express Checkout for WooCommerce: Missing Authorization

    		5.3
    MediumCVE-2026-111845

    WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-105878

    WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2021-36841

    YITH Maintenance Mode (WordPress plugin): Cross-site Scripting

    also in 1 other product

    		6.9
    MediumCVE-2022-44633

    YITH WooCommerce Gift Cards Premium: Missing Authorization

    		6.5
    MediumCVE-2023-36506

    WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-27329

    YITH WooCommerce Wishlist: Authorization Bypass Through User-Controlled Key

    		5.3
    HighCVE-2024-30470

    YITH WooCommerce Account Funds Premium: Missing Authorization

    also in 1 other product

    		6.5
    MediumCVE-2022-44630

    YITH WooCommerce Product Slider Carousel: Cross-Site Request Forgery (CSRF)

    		4.6

    Products

    Products by YITH
    Yith Woocommerce Product Add-ons30