5.3
Medium
CVE-2026-66480 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce…
Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| YITH WooCommerce Product Add-Ons 4.34 | earliest → 4.34.0 | No fix stated |
Other CVEs of YITH WooCommerce Product Add-Ons
The 8 CVEs of YITH WooCommerce Product Add-Ons →
CVE-2026-42383
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH…
7.6
High
CVE-2023-46635
Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows…
5.3
Medium
CVE-2024-50448
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
7.1
High
CVE-2024-47367
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
7.1
High