WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yith-woocommerce-ajax-navigation
Published
2024-07-10
Title
YITH WooCommerce Ajax Product Filter < 5.2.0 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-ajax-search
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-ajax-search
Published
2024-05-23
Title
YITH WooCommerce Ajax Search < 2.4.1 - Unauthenticated Stored Cross-Site Scripting
Slug
yith-woocommerce-ajax-search
Published
2024-09-02
Title
YITH WooCommerce Ajax Search < 2.7.1 - Contributor+ Stored XSS
Slug
yith-woocommerce-ajax-search
Published
2024-09-30
Title
YITH WooCommerce Ajax Search < 2.8.1 - Unauthenticated SQL Injection
Slug
yith-woocommerce-authorizenet-payment-gateway
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-badges-management
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-best-sellers
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-brands-add-on
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-bulk-product-editing
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-cart-messages
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-catalog-mode
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-compare
Published
2016-11-08
Title
YITH WooCommerce Compare < 2.1.0 - Unauthenticated PHP Object injection
Slug
yith-woocommerce-compare
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-compare
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-compare
Published
2024-04-22
Title
YITH WooCommerce Compare < 2.38.0 - Cross-Site Request Forgery
Slug
yith-woocommerce-compare
Published
2025-08-07
Title
YITH WooCommerce Compare < 3.7.0 - Authenticated (Admin+) PHP Object Injection
Slug
yith-woocommerce-frequently-bought-together
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-gift-cards
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-gift-cards
Published
2024-05-13
Title
YITH WooCommerce Gift Cards < 4.13.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update
Slug
yith-woocommerce-gift-cards-premium
Published
2021-02-23
Title
YITH WooCommerce Gift Cards Premium < 3.3.1 - RCE via Arbitrary File Upload
Slug
yith-woocommerce-gift-cards-premium
Published
2022-12-06
Title
YITH WooCommerce Gift Cards < 3.20.0 - Unauthenticated Arbitrary File Upload
Slug
yith-woocommerce-mailchimp
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-membership-premium
Published
2026-08-18
Title
YITH WooCommerce Membership Premium < 2.33.1 - Authenticated (Subscriber+) SQL Injection
Slug
yith-woocommerce-multi-step-checkout
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update