Plugin icon

YITH WooCommerce Product Add-Ons

yith-woocommerce-product-add-ons

Vulnerabilities:

9

Last Updated:

March 31, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2024-10-24
Title
YITH WooCommerce Product Add-Ons < 4.14.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.14.2
CVSS
6.1 (medium)
Published
2024-09-30
Title
YITH WooCommerce Product Add-Ons < 4.13.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.13.1
CVSS
6.1 (medium)
Published
2024-06-06
Title
YITH WooCommerce Product Add-Ons < 4.9.3 - Unauthenticated Content Injection
Fixed in
Fixed in 4.9.3
CVSS
5.3 (medium)
Published
2024-03-15
Title
YITH WooCommerce Product Add-Ons < 4.6.0 - Unuathenticated Cross-Site Scripting
Fixed in
Fixed in 4.6.0
CVSS
6.1 (medium)
Published
2023-12-28
Title
YITH WooCommerce Product Add-Ons < 4.3.1 - Authenticated(Shop Manager+) PHP Object Injection
Fixed in
Fixed in 4.3.1
CVSS
6.6 (medium)
Published
2023-10-25
Title
YITH WooCommerce Product Add-Ons < 4.2.1 - Missing Authorization
Fixed in
Fixed in 4.2.1
CVSS
5.3 (medium)
Published
2021-09-20
Title
YITH WooCommerce Product Add-Ons < 2.1.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.1.0
CVSS
8.8 (high)
Published
2021-09-20
Title
YITH WooCommerce Product Add-Ons < 2.1.0 - Authenticated Local File Inclusion
Fixed in
Fixed in 2.1.0
CVSS
4.1 (medium)
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Fixed in
Fixed in 1.5.23
CVSS
4.3 (medium)