5.3 Medium

CVE-2026-105878 Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows…

Description

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0.

Affected products and versions

Product	Affected versions	Fixed in
YITH WooCommerce Product Bundles 2.29	earliest → 2.29.0	No fix stated

The 2 CVEs of YITH WooCommerce Product Bundles →

CVE-2026-111845 Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows… 5.3 Medium

Do you use YITH WooCommerce Product Bundles?

Track this CVE Watch YITH WooCommerce Product Bundles Check my SBOMs

www.cveye.io/en/cve/CVE-2026-105878

Timeline

Published October 8, 2026
Last modified October 8, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2026-105878 Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows…

Description

Affected products and versions

Other CVEs of YITH WooCommerce Product Bundles