WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yith-maintenance-mode
Published
2021-09-23
Title
YITH Maintenance Mode < 1.4.0 - Multiple Admin+ Stored Cross-Site Scripting
Slug
yith-maintenance-mode
Published
2021-09-15
Title
YITH Maintenance Mode < 1.3.8 - Admin+ Stored Cross-Site Scripting
Slug
yith-paypal-express-checkout-for-woocommerce
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-paypal-express-checkout-for-woocommerce
Published
2025-06-16
Title
YITH PayPal Express Checkout for WooCommerce < 1.49.1 - Cross-Site Request Forgery
Slug
yith-pre-order-for-woocommerce
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-product-size-charts-for-woocommerce
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-slider-for-page-builders
Published
2025-12-24
Title
YITH Slider for page builders <= 1.0.11 - Missing Authorization
Slug
yith-woocommerce-account-funds-premium
Published
2024-03-28
Title
YITH WooCommerce Account Funds Premium < 1.34.0 - Missing Authorization
Slug
yith-woocommerce-added-to-cart-popup
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-advanced-reviews
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-affiliates
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-ajax-navigation
Published
2020-06-22
Title
YITH WooCommerce Ajax Product Filter < 3.11.1 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
yith-woocommerce-ajax-navigation
Published
2024-07-10
Title
YITH WooCommerce Ajax Product Filter < 5.2.0 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-ajax-search
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-ajax-search
Published
2024-05-23
Title
YITH WooCommerce Ajax Search < 2.4.1 - Unauthenticated Stored Cross-Site Scripting
Slug
yith-woocommerce-ajax-search
Published
2024-09-02
Title
YITH WooCommerce Ajax Search < 2.7.1 - Contributor+ Stored XSS
Slug
yith-woocommerce-ajax-search
Published
2024-09-30
Title
YITH WooCommerce Ajax Search < 2.8.1 - Unauthenticated SQL Injection
Slug
yith-woocommerce-authorizenet-payment-gateway
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-badges-management
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-best-sellers
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-brands-add-on
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-bulk-product-editing
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-cart-messages
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-catalog-mode
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-compare
Published
2016-11-08
Title
YITH WooCommerce Compare < 2.1.0 - Unauthenticated PHP Object injection