Skip to content

Known vulnerabilities in YITH WooCommerce Product Add-Ons

Is your version affected?

CVE Summary Score Published
CVE-2026-66480 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce… 5.3 Medium Oct 10, 2026
CVE-2026-42383 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH… 7.6 High May 20, 2026
CVE-2023-46635 Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows… 5.3 Medium Jan 2, 2025
CVE-2024-50448 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH… 7.1 High Oct 28, 2024
CVE-2024-47367 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH… 7.1 High Oct 6, 2024
CVE-2024-35680 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in YITHEMES YITH WooCommerce… 5.3 Medium Jun 10, 2024
CVE-2024-27994 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH… 7.1 High Mar 21, 2024
CVE-2023-49777 Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH… 9.1 Critical Dec 31, 2023

Other YITH products