YW
Product
YITH WooCommerce Ajax Search
by yithemes · last CVE Sep 30, 2026
5
CVEs
0
On KEV
9.3
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 3Low 0
Watch

Add YITH WooCommerce Ajax Search to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-47350
9.3
0%
Oct 6
WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability
Affected: through 2.8.0
CVE-2026-96352
7.1
0%
Sep 30
WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.28.0
CVE-2024-4455
6.1
1%
May 24
YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting
Affected: through 2.4.0
CVE-2024-7846
5.4
0%
Sep 23
YITH WooCommerce Ajax Search < 2.7.1 - Contributor+ Stored XSS
Affected: before 2.7.1
CVE-2019-16251
4.3
1%
Oct 31
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes
Affected: through 1.6.9
Showing 5