Login Request a demo
YI
Vendor
Yithemes
49 products with CVEs on record
77
CVEs
0
On KEV
2
New 30D
Products
YW
YITH WooCommerce Ajax Search
yithemes
9.3
5 CVEs0 on KEV1 new
YW
YITH WooCommerce Tab Manager
YITHEMES
6.5
2 CVEs0 on KEV1 new
YW
YITH WooCommerce Product Add-Ons
YITHEMES
8.8
7 CVEs0 on KEV0 new
YW
YITH WooCommerce Wishlist
yithemes
6.4
5 CVEs0 on KEV0 new
YW
YITH WooCommerce Gift Cards
yithemes
9.8
4 CVEs0 on KEV0 new
YM
Yith Maintenance Mode
Yithemes
6.5
3 CVEs0 on KEV0 new
YW
YITH WooCommerce Compare
YITHEMES
7.2
3 CVEs0 on KEV0 new
YC
YITH Custom Login
yithemes
6.1
2 CVEs0 on KEV0 new
YP
YITH PayPal Express Checkout for WooCommerce
YITHEMES
4.3
2 CVEs0 on KEV0 new
YW
YITH WooCommerce Quick View
yithemes
6.4
2 CVEs0 on KEV0 new
YW
YITH WooCommerce Request A Quote
YITHEMES
5.3
2 CVEs0 on KEV0 new
YW
Yith Woocommerce Social Login
Yithemes
7.3
2 CVEs0 on KEV0 new
YW
YITH WooCommerce Zoom Magnifier
YITHEMES
5.3
2 CVEs0 on KEV0 new
WA
Woocommerce Account Funds
Yithemes
8.8
1 CVEs0 on KEV0 new
WA
Woocommerce Affiliate
Yithemes
6.1
1 CVEs0 on KEV0 new
YA
Yith Advanced Refund System For Woocommerce
Yithemes
4.3
1 CVEs0 on KEV0 new
YC
Yith Color And Label Variations For Woocommerce
Yithemes
4.3
1 CVEs0 on KEV0 new
YC
Yith Custom Thank You Page For Woocommerce
Yithemes
4.3
1 CVEs0 on KEV0 new
YD
Yith Desktop Notifications For Woocommerce
Yithemes
4.3
1 CVEs0 on KEV0 new
YE
Yith Essential Kit For Woocommerce
Yithemes
4.3
1 CVEs0 on KEV0 new
YE
YITH Essential Kit for WooCommerce #1
yithemes
4.3
1 CVEs0 on KEV0 new
YP
Yith Pre-order For Woocommerce
Yithemes
4.3
1 CVEs0 on KEV0 new
YP
Yith Product Size Charts For Woocommerce
Yithemes
4.3
1 CVEs0 on KEV0 new
YS
YITH Slider for page builders
YITHEMES
5.4
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Account Funds Premium
Yithemes
8.8
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Added TO Cart Popup
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Advanced Reviews
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Affiliates
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
YITH WooCommerce Ajax Product Filter
YITHEMES
5.8
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Authorize.net Payment Gateway
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Badge Management
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Best Sellers
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Brands Add-on
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Bulk Product Editing
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Cart Messages
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Frequently Bought Together
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Mailchimp
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Multi-step Checkout
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Multi Vendor
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Order Tracking
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Pdf Invoice And Shipping List
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Points And Rewards
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
YITH WooCommerce Popup
YITHEMES
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Product Bundles
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Questions And Answers
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Recover Abandoned Cart
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Stripe
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Subscription
Yithemes
4.3
1 CVEs0 on KEV0 new
YW
Yith Woocommerce Waiting List
Yithemes
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-97292
YW
YITH WooCommerce Tab Manager
YITHEMES
6.5
0%
Sep 30WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96352
YW
YITH WooCommerce Ajax Search
YITHEMES
7.1
0%
Sep 30WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28169
YW
YITH WooCommerce Zoom Magnifier
YITHEMES
5.3
0%
Aug 6WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability
CVE-2026-22333
YW
YITH WooCommerce Compare
YITHEMES
7.2
1%
Feb 19WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability
CVE-2026-24366
YW
YITH WooCommerce Request A Quote
YITHEMES
5.3
0%
Jan 22WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability
CVE-2025-68581
YS
YITH Slider for page builders
YITHEMES
5.4
0%
Dec 24WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability
CVE-2025-8617
YW
YITH WooCommerce Quick View
yithemes
6.4
0%
Dec 13YITH WooCommerce Quick View <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode
CVE-2025-12427
YW
YITH WooCommerce Wishlist
yithemes
5.3
0%
Nov 19YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename
CVE-2025-12777
YW
YITH WooCommerce Wishlist
yithemes
5.3
0%
Nov 19YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion
CVE-2025-54675
YW
YITH WooCommerce Popup
YITHEMES
4.3
0%
Aug 14WordPress YITH WooCommerce Popup Plugin plugin <= 1.48.0 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-48111
YP
YITH PayPal Express Checkout for WooCommerce
YITHEMES
4.3
0%
Jun 17WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.49.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-5238
YW
YITH WooCommerce Wishlist
yithemes
6.4
0%
Jun 14YITH WooCommerce Wishlist <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2023-46635
YW
YITH WooCommerce Product Add-Ons
YITHEMES
5.3
0%
Jan 2WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability
CVE-2024-50448
YW
YITH WooCommerce Product Add-Ons
YITHEMES
6.1
0%
Oct 28WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-47350
YW
YITH WooCommerce Ajax Search
YITHEMES
9.3
0%
Oct 6WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability
CVE-2024-47367
YW
YITH WooCommerce Product Add-Ons
YITHEMES
7.1
0%
Oct 6WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-7846
YW
Yith Woocommerce Ajax Search
Yithemes
5.4
0%
Sep 23YITH WooCommerce Ajax Search < 2.7.1 - Contributor+ Stored XSS
CVE-2024-8665
YC
YITH Custom Login
yithemes
6.1
0%
Sep 13YITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting
CVE-2024-37943
YW
YITH WooCommerce Ajax Product Filter
YITHEMES
5.8
0%
Jul 20WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-6637
YW
Yith Woocommerce Social Login
Yithemes
7.3
0%
Jul 20WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password
CVE-2024-6799
YE
YITH Essential Kit for WooCommerce #1
yithemes
4.3
0%
Jul 19YITH Essential Kit for WooCommerce #1 <= 2.34.0 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install, Activation, and Deactivation
CVE-2024-35680
YW
YITH WooCommerce Product Add-Ons
YITHEMES
5.3
0%
Jun 10WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability
CVE-2024-30470
WA
Woocommerce Account Funds
Yithemes
8.8
0%
Jun 9WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerability
CVE-2024-35698
YW
YITH WooCommerce Tab Manager
YITHEMES
4.8
0%
Jun 8WordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-35732
YC
YITH Custom Login
YITHEMES
4.8
0%
Jun 8WordPress YITH Custom Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-34385
YW
YITH WooCommerce Wishlist
YITHEMES
5.9
0%
Jun 3WordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-4455
YW
YITH WooCommerce Ajax Search
yithemes
6.1
1%
May 24YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-0870
YW
YITH WooCommerce Gift Cards
yithemes
5.3
1%
May 14YITH WooCommerce Gift Cards <= 4.12.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update
CVE-2024-32699
YW
YITH WooCommerce Compare
YITHEMES
4.3
0%
Apr 24WordPress YITH WooCommerce Compare plugin <= 2.37.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-27994
YW
YITH WooCommerce Product Add-Ons
YITHEMES
7.1
0%
Mar 21WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2023-49777
YW
Yith Woocommerce Product Add-ons
Yithemes
8.8
1%
Dec 31WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection
CVE-2022-45359
YW
Yith Woocommerce Gift Cards
Yithemes
9.8
14%
Dec 6Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress
CVE-2022-0818
WA
Woocommerce Affiliate
Yithemes
6.1
1%
Mar 28The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its…
CVE-2021-36845
YM
Yith Maintenance Mode
Yithemes
4.8
1%
Sep 27Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.8, there are 46 vulnerable parameters that…
CVE-2021-36841
YM
Yith Maintenance Mode
Yithemes
5.4
1%
Sep 27Authenticated Stored Cross-Site Scripting (XSS) vulnerability in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.7, vulnerable parameter…
CVE-2021-3120
YW
Yith Woocommerce Gift Cards
Yithemes
9.8
37%
Feb 22An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the…
CVE-2019-16251
YW
Yith Woocommerce Wishlist
Yithemes
4.3
1%
Oct 31plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes
CVE-2015-9429
YM
Yith Maintenance Mode
Yithemes
6.5
1%
Sep 26The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter