YITHEMES vulnerabilities
28 published CVEs name YITHEMES among the affected products.
- 28Published CVEs28 of them scored
- 10Last 12 monthspublished in the last year
- 1Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-107868
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability
YITHEMES · YITH WooCommerce Product Add-Ons
Medium5.3 - CVE-2026-97292
WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability
YITHEMES · YITH WooCommerce Tab Manager
Medium6.5 - CVE-2026-96352
WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability
YITHEMES · YITH WooCommerce Ajax Search
High7.1 - CVE-2026-28169
WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability
YITHEMES · YITH WooCommerce Zoom Magnifier
Medium5.3 - CVE-2026-22333
WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability
YITHEMES · YITH WooCommerce Compare
High7.2 - CVE-2026-24366
WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability
YITHEMES · YITH WooCommerce Request A Quote
Medium5.3 - CVE-2025-68581
WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability
YITHEMES · YITH Slider for page builders
Medium5.4 - CVE-2025-8617
YITH WooCommerce Quick View <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode
yithemes · YITH WooCommerce Quick View
Medium6.4 - CVE-2025-12427
YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename
yithemes · YITH WooCommerce Wishlist
Medium5.3 - CVE-2025-12777
YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion
yithemes · YITH WooCommerce Wishlist
Medium5.3