[ Vendor · 8 CVEs ]
YITH
CVEs affecting YITH published in the last 30 days, plus any YITH CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112199 | 19 Oct 2026 | CVSS 6.5 | YITH WooCommerce WishlistImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Wishlist… | |
| CVE-2026-111845 | 19 Oct 2026 | CVSS 5.3 | YITH WooCommerce Product BundlesMissing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly… | |
| CVE-2026-111409 | 16 Oct 2026 | CVSS 5.3 | YITH PayPal Express Checkout for WooCommerceMissing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows… | |
| CVE-2026-106604 | 15 Oct 2026 | CVSS 6.5 | YITH WooCommerce CompareImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Compare… | |
| CVE-2026-66480 | 10 Oct 2026 | CVSS 5.3 | YITH WooCommerce Product Add-OnsExposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve… | |
| CVE-2026-106606 | 10 Oct 2026 | CVSS 7.2 | YITH WooCommerce AffiliatesDeserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue… | |
| CVE-2026-105878 | 8 Oct 2026 | CVSS 5.3 | YITH WooCommerce Product BundlesMissing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly… | |
| CVE-2026-95602 | 23 Sep 2026 | CVSS 6.5 | YITH WooCommerce Request A QuoteAuthorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A Quote allows Exploiting Incorrectly Configured… |