Product by YITHEMES
Yith Woocommerce Product Add-ons
8 known vulnerabilities in Yith Woocommerce Product Add-ons (YITHEMES), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-49777 | WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection | 9.1 | |
| Medium | CVE-2026-107868 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability | 5.3 | |
| Medium | CVE-2019-16251 | YITHEMES Yith Advanced Refund System For Woocommerce: security vulnerability | 4.3 | |
| High | CVE-2024-27994 | YITHEMES YITH WooCommerce Product Add-Ons: Cross-site Scripting | 7.1 | |
| High | CVE-2024-50448 | YITHEMES YITH WooCommerce Product Add-Ons: Cross-site Scripting | 7.1 | |
| High | CVE-2024-47367 | YITHEMES YITH WooCommerce Product Add-Ons: Cross-site Scripting | 7.1 | |
| Medium | CVE-2023-46635 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability | 5.3 | |
| Medium | CVE-2024-35680 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability | 5.3 |