9.1
Critical
CVE-2023-49777 Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH…
Description
Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| YITH WooCommerce Product Add-Ons 4.3 | earliest → 4.3.0 | No fix stated |
Other CVEs of YITH WooCommerce Product Add-Ons
The 8 CVEs of YITH WooCommerce Product Add-Ons →
CVE-2026-66480
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce…
5.3
Medium
CVE-2026-42383
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH…
7.6
High
CVE-2023-46635
Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows…
5.3
Medium
CVE-2024-50448
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
7.1
High