YITH vulnerabilities
25 published CVEs name YITH among the affected products.
- 25Published CVEs25 of them scored
- 18Last 12 monthspublished in the last year
- 3Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125833
WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.24.0 - Cross Site Scripting (XSS) vulnerability
YITH · YITH WooCommerce Ajax Product Filter
Medium6.5 - CVE-2026-125761
WordPress YITH WooCommerce Ajax Search plugin <= 2.30.0 - Cross Site Scripting (XSS) vulnerability
YITH · YITH WooCommerce Ajax Search
Medium6.5 - CVE-2026-121779
WordPress YITH WooCommerce Subscription plugin <= 4.22.0 - Sensitive Data Exposure vulnerability
YITH · YITH WooCommerce Subscription
Medium5.3 - CVE-2026-27401
WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability
YITH · YITH PayPal Express Checkout for WooCommerce
Medium5.3 - CVE-2026-111845
WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability
YITH · YITH WooCommerce Product Bundles
Medium5.3 - CVE-2026-112199
WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability
YITH · YITH WooCommerce Wishlist
Medium6.5 - CVE-2026-111409
WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability
YITH · YITH PayPal Express Checkout for WooCommerce
Medium5.3 - CVE-2026-106604
WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
YITH · YITH WooCommerce Compare
Medium6.5 - CVE-2026-66480
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability
YITH · YITH WooCommerce Product Add-Ons
Medium5.3 - CVE-2026-106606
WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability
YITH · YITH WooCommerce Affiliates
High7.2