Log in Start free

YITHEMES

Products

ProductCVEsExploitedLatest
YITH WooCommerce Product Add-Ons6–Oct 30, 2026
YITH WooCommerce Wishlist4–Nov 19, 2025
YITH WooCommerce Ajax Search3–Sep 30, 2026
YITH WooCommerce Compare2–Feb 19, 2026
YITH WooCommerce Tab Manager2–Sep 30, 2026
YITH Custom Login2–Sep 13, 2024
YITH WooCommerce Popup1–Aug 14, 2025
YITH WooCommerce Quick View1–Dec 13, 2025
YITH WooCommerce Request A Quote1–Jan 22, 2026
YITH WooCommerce Zoom Magnifier1–Aug 6, 2026
YITH Essential Kit for WooCommerce #11–Jul 19, 2024
YITH PayPal Express Checkout for WooCommerce1–Jun 17, 2025
YITH Slider for page builders1–Dec 24, 2025
YITH WooCommerce Ajax Product Filter1–Jul 20, 2024
YITH WooCommerce Gift Cards1–May 14, 2024

Exploited and recent CVEs

  • CVE-2026-107868 Medium 5.3 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability 0.3%
  • CVE-2026-97292 Medium 6.5 WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-96352 High 7.1 WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-28169 Medium 5.3 WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-22333 High 7.2 WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability 0.5%
  • CVE-2026-24366 Medium 5.3 WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-68581 Medium 5.4 WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability 0.2%
  • CVE-2025-8617 Medium 6.4 YITH WooCommerce Quick View <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode 0.3%
  • CVE-2025-12427 Medium 5.3 YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename 0.3%
  • CVE-2025-12777 Medium 5.3 YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion 0.3%
  • CVE-2025-54675 Medium 4.3 WordPress YITH WooCommerce Popup Plugin plugin <= 1.48.0 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-48111 Medium 4.3 WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.49.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-5238 Medium 6.4 YITH WooCommerce Wishlist <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter 0.3%
  • CVE-2023-46635 Medium 5.3 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability 0.4%
  • CVE-2024-50448 High 7.1 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-47350 Critical 9.3 WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability 0.4%
  • CVE-2024-47367 High 7.1 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-8665 Medium 6.1 YITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting 0.5%
  • CVE-2024-37943 Medium 5.8 WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-6799 Medium 4.3 YITH Essential Kit for WooCommerce #1 <= 2.34.0 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install, Activation, and Deactivation 0.3%
  • CVE-2024-35680 Medium 5.3 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability 0.3%
  • CVE-2024-35698 Medium 5.9 WordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-35732 Medium 5.9 WordPress YITH Custom Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-34385 Medium 5.9 WordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-4455 High 7.2 YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting 1.0%
  • CVE-2024-0870 Medium 5.3 YITH WooCommerce Gift Cards <= 4.12.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update 0.5%
  • CVE-2024-32699 Medium 4.3 WordPress YITH WooCommerce Compare plugin <= 2.37.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-27994 High 7.1 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability 0.4%