Log in Start free

YITH

Products

ProductCVEsExploitedLatest
YITH WooCommerce Product Add-Ons3–Oct 10, 2026
YITH PayPal Express Checkout for WooCommerce2–Oct 29, 2026
YITH Maintenance Mode (WordPress plugin)2–Sep 27, 2021
YITH WooCommerce Product Bundles2–Oct 19, 2026
YITH WooCommerce Wishlist2–Oct 19, 2026
YITH WooCommerce Compare1–Oct 15, 2026
YITH WooCommerce Gift Cards1–Dec 6, 2022
YITH WooCommerce Gift Cards Premium1–Mar 21, 2024
YITH WooCommerce Membership Premium1–Aug 19, 2026
YITH Request a Quote for WooCommerce Premium1–Sep 3, 2026
YITH WooCommerce Waitlist Premium1–Sep 9, 2026
YITH WooCommerce Product Slider Carousel1–Jun 11, 2026
YITH WooCommerce Request A Quote1–Sep 23, 2026
YITH WooCommerce Subscription1–Nov 7, 2026
YITH WooCommerce Waiting List1–Dec 13, 2024
YITH WooCommerce Account Funds Premium1–Jun 9, 2024
YITH WooCommerce Affiliates1–Oct 10, 2026

Exploited and recent CVEs

  • CVE-2026-121779 Medium 5.3 WordPress YITH WooCommerce Subscription plugin <= 4.22.0 - Sensitive Data Exposure vulnerability –
  • CVE-2026-27401 Medium 5.3 WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-111845 Medium 5.3 WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-112199 Medium 6.5 WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-111409 Medium 5.3 WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-106604 Medium 6.5 WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-66480 Medium 5.3 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-106606 High 7.2 WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-105878 Medium 5.3 WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-95602 Medium 6.5 WordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerability 0.4%
  • CVE-2026-14359 High 8.8 YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user 0.4%
  • CVE-2026-84238 Critical 9.8 WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerability 0.5%
  • CVE-2026-32552 High 8.5 WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability 0.4%
  • CVE-2022-44630 Medium 4.6 WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF) 0.1%
  • CVE-2026-42383 High 7.6 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability 0.3%
  • CVE-2026-27329 Medium 5.3 WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2023-36506 Medium 5.3 WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability 0.5%
  • CVE-2024-30470 Medium 6.5 WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerability 0.4%
  • CVE-2022-44633 Medium 6.5 WordPress YITH WooCommerce Gift Cards Premium plugin <= 3.23.1 - Unauth. Gift Card Creation Leading to Stored XSS vulnerability 0.5%
  • CVE-2023-49777 Critical 9.1 WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection 0.7%
  • CVE-2022-45359 Critical 9.8 WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload 13.5%
  • CVE-2021-36845 Medium 6.9 YITH Maintenance Mode (WordPress plugin) <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities 0.7%
  • CVE-2021-36841 Medium 6.9 YITH Maintenance Mode (WordPress plugin) <= 1.3.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability. 0.6%