Yith
10 CVEs across 8 Yith products. Browse Yith vulnerabilities, severities, and proof-of-concept exploits.
Yith products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-44630 | Medium | 4.6 | 2026-06-11 | Cross-Site request forgery (CSRF) vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. This issue affects YITH Wo… |
CVE-2026-42383 | High | 7.6 | 2026-05-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL In… |
CVE-2026-27329 | Medium | 5.3 | 2026-05-07 | Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2023-36506 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in YITH YITH WooCommerce Waiting List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2024-30470 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through… |
CVE-2022-44633 | Medium | 6.5 | 2024-04-11 | Missing Authorization vulnerability in YITH YITH WooCommerce Gift Cards Premium.This issue affects YITH WooCommerce Gift Cards Premium: from n/a through 3.23.1. |
CVE-2023-49777 | Critical | 9.1 | 2023-12-31 | Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through… |
CVE-2022-45359 | Critical | 9.8 | 2022-12-06 | Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress. |
CVE-2021-36845 | Medium | 6.9 | 2021-09-27 | Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.8, there are 46 vulnerable… |
CVE-2021-36841 | Medium | 6.9 | 2021-09-27 | Authenticated Stored Cross-Site Scripting (XSS) vulnerability in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.7, vulnerable parameter &yith_mainten… |