YI
Vendor
YITH
14
CVEs
0
On KEV
7
New 30D
Products
YW5.3
YITH WooCommerce Product Bundles
YITH
2 CVEs0 on KEV2 new
YW7.6
YITH WooCommerce Product Add-Ons
YITH
2 CVEs0 on KEV1 new
YW6.5
YITH WooCommerce Wishlist
YITH
2 CVEs0 on KEV1 new
YP5.3
YITH PayPal Express Checkout for WooCommerce
YITH
1 CVEs0 on KEV1 new
YW7.2
YITH WooCommerce Affiliates
YITH
1 CVEs0 on KEV1 new
YW6.5
YITH WooCommerce Compare
YITH
1 CVEs0 on KEV1 new
YR9.8
YITH Request a Quote for WooCommerce Premium
YITH
1 CVEs0 on KEV0 new
YW8.5
YITH WooCommerce Membership Premium
YITH
1 CVEs0 on KEV0 new
YW4.6
YITH WooCommerce Product Slider Carousel
YITH
1 CVEs0 on KEV0 new
YW6.5
YITH WooCommerce Request A Quote
YITH
1 CVEs0 on KEV0 new
YW8.8
YITH WooCommerce Waitlist Premium
Yith
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111845 | YW YITH WooCommerce Product Bundles YITH | 5.3 | Oct 19 | WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability |
| CVE-2026-112199 | YW YITH WooCommerce Wishlist YITH | 6.5 | Oct 19 | WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-111409 | YP YITH PayPal Express Checkout for WooCommerce YITH | 5.3 | Oct 16 | WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability |
| CVE-2026-106604 | YW YITH WooCommerce Compare YITH | 6.5 | Oct 15 | WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-66480 | YW YITH WooCommerce Product Add-Ons YITH | 5.3 | Oct 10 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability |
| CVE-2026-106606 | YW YITH WooCommerce Affiliates YITH | 7.2 | Oct 10 | WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability |
| CVE-2026-105878 | YW YITH WooCommerce Product Bundles YITH | 5.3 | Oct 8 | WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability |
| CVE-2026-95602 | YW YITH WooCommerce Request A Quote YITH | 6.5 | Sep 23 | WordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-14359 | YW YITH WooCommerce Waitlist Premium Yith | 8.8 | Sep 9 | YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user |
| CVE-2026-84238 | YR YITH Request a Quote for WooCommerce Premium YITH | 9.8 | Sep 3 | WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerability |
| CVE-2026-32552 | YW YITH WooCommerce Membership Premium YITH | 8.5 | Aug 19 | WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability |
| CVE-2022-44630 | YW YITH WooCommerce Product Slider Carousel YITH | 4.6 | Jun 11 | WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF) |
| CVE-2026-42383 | YW YITH WooCommerce Product Add-Ons YITH | 7.6 | May 20 | WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability |
| CVE-2026-27329 | YW YITH WooCommerce Wishlist YITH | 5.3 | May 7 | WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerability |