Known vulnerabilities in yithemes YITH WooCommerce Ajax Search
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-96352 | Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions | 7.1 High | Sep 30, 2026 |
| CVE-2024-47350 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITHEMES YITH… | 9.3 Critical | Oct 6, 2024 |
| CVE-2024-4455 | The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘item’… | 7.2 High | May 24, 2024 |
Other yithemes products
YITH WooCommerce Product Add-Ons 6
YITH WooCommerce Wishlist 4
YITH WooCommerce Tab Manager 2
yith_woocommerce_ajax_search 2
YITH WooCommerce Compare 2
YITH Custom Login 2
yith_woocommerce_gift_cards 1
YITH WooCommerce Zoom Magnifier 1
yith_woocommerce_social_login 1
YITH WooCommerce Request A Quote 1
YITH WooCommerce Quick View 1
yith_woocommerce_product_add-ons 1