Vendor

    YITHEMES

    38 known vulnerabilities in products by YITHEMES, 0 of them actively exploited (CISA KEV).

    Key figures

    38

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in YITHEMES
    CriticalCVE-2021-3120

    YITH WooCommerce Gift Cards: Unrestricted File Upload

    		9.8
    CriticalCVE-2022-45359

    YITH WooCommerce Gift Cards: Unrestricted Upload of File with Dangerous Type

    also in 1 other product

    		9.8
    HighCVE-2024-4455

    YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting

    		7.2
    CriticalCVE-2023-49777

    WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection

    also in 1 other product

    		9.1
    HighCVE-2026-22333

    WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability

    		7.2
    HighCVE-2026-96352

    WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability

    		7.1
    CriticalCVE-2024-47350

    WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability

    		9.3
    MediumCVE-2026-97292

    WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-107868

    WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability

    		5.3
    MediumCVE-2015-9429

    YITHEMES Yith Maintenance Mode: Cross-Site Scripting (XSS)

    		6.5
    MediumCVE-2022-0818

    Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS

    		6.1
    MediumCVE-2021-36845

    YITH Maintenance Mode (WordPress plugin): Cross-site Scripting

    also in 1 other product

    		6.9
    MediumCVE-2021-36841

    YITH Maintenance Mode (WordPress plugin): Cross-site Scripting

    also in 1 other product

    		6.9
    MediumCVE-2026-28169

    WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability

    		5.3
    MediumCVE-2019-16251

    YITHEMES Yith Advanced Refund System For Woocommerce: security vulnerability

    		4.3
    MediumCVE-2024-8665

    YITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting

    		6.1
    HighCVE-2024-27994

    YITHEMES YITH WooCommerce Product Add-Ons: Cross-site Scripting

    		7.1
    MediumCVE-2025-8617

    YITHEMES YITH WooCommerce Quick View: Cross-site Scripting

    		6.4
    HighCVE-2024-50448

    YITHEMES YITH WooCommerce Product Add-Ons: Cross-site Scripting

    		7.1
    HighCVE-2024-47367

    YITHEMES YITH WooCommerce Product Add-Ons: Cross-site Scripting

    		7.1
    MediumCVE-2024-0870

    YITHEMES YITH WooCommerce Gift Cards: Improper Authorization

    		5.3
    HighCVE-2024-30470

    YITH WooCommerce Account Funds Premium: Missing Authorization

    also in 1 other product

    		6.5
    MediumCVE-2025-5238

    YITHEMES YITH WooCommerce Wishlist: Cross-site Scripting

    		6.4
    MediumCVE-2025-12777

    YITHEMES YITH WooCommerce Wishlist: Improper Authorization

    		5.3
    MediumCVE-2025-12427

    YITHEMES YITH WooCommerce Wishlist: Authorization Bypass Through User-Controlled Key

    		5.3

    All vulnerabilities in search

    Products

    Products by YITHEMES
    Yith Woocommerce Product Add-ons100
    Yith Woocommerce Ajax Search60
    Yith Woocommerce Wishlist50
    Yith Custom Login40
    YITH WooCommerce Gift Cards40
    YITH Maintenance Mode (WordPress plugin)30
    Yith Woocommerce Compare30
    Yith Woocommerce Tab Manager30