Yithemes Yith Woocommerce Ajax Search
3 CVEs affecting Yithemes Yith Woocommerce Ajax Search. Latest disclosed: 2024-09-23. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4455 | High | 7.2 | 2024-05-24 | The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘item’ parameter in versions up to, and including, 2… |
CVE-2024-7846 | Medium | 5.4 | 2024-09-23 | YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes. This makes it possible fo… |
CVE-2019-16251 | Medium | 4.3 | 2019-10-31 | plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes. |