7.6
Élevée
CVE-2026-42383 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| YITH WooCommerce Product Add-Ons 4.29 | premières → 4.29.0 | Pas de correctif indiqué |
Autres CVE de YITH WooCommerce Product Add-Ons
Les 8 CVE de YITH WooCommerce Product Add-Ons →
CVE-2026-66480
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce…
5.3
Moyenne
CVE-2023-46635
Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows…
5.3
Moyenne
CVE-2024-50448
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
7.1
Élevée
CVE-2024-47367
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
7.1
Élevée