Skip to content
Sign in
7.6 High

CVE-2026-42383 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.

Affected products and versions

Product Affected versions Fixed in
YITH WooCommerce Product Add-Ons 4.29 earliest → 4.29.0 No fix stated

Other CVEs of YITH WooCommerce Product Add-Ons

The 8 CVEs of YITH WooCommerce Product Add-Ons →
CVE-2026-66480 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce… 5.3 Medium CVE-2023-46635 Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows… 5.3 Medium CVE-2024-50448 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH… 7.1 High CVE-2024-47367 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH… 7.1 High
Track this CVE