YITH PayPal Express Checkout for WooCommerce vulnerabilities

Product

YITH PayPal Express Checkout for WooCommerce

by YITHEMES · last CVE Jun 17, 2025

CVEs

On KEV

4.3

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add YITH PayPal Express Checkout for WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-48111	4.3	0%	Jun 17	WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.49.0 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 1.49.0
CVE-2019-16251	4.3	1%	Oct 31	plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes Affected: through 1.2.5