WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yith-woocommerce-product-vendors
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-product-vendors
Published
2021-10-11
Title
YITH WooCommerce Multi Vendor < 3.8.1 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-questions-and-answers
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-quick-view
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-quick-view
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-quick-view
Published
2025-12-12
Title
YITH WooCommerce Quick View < 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode
Slug
yith-woocommerce-recover-abandoned-cart
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-request-a-quote
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-request-a-quote
Published
2021-06-30
Title
YITH Request a Quote for WooCommerce < 1.6.4 - Unauthorised AJAX call via CSRF
Slug
yith-woocommerce-social-login
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-stripe
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-subscription
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-tab-manager
Published
2024-06-06
Title
YITH WooCommerce Tab Manager < 1.35.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
yith-woocommerce-waiting-list
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-wishlist
Published
2018-01-16
Title
YITH WooCommerce Wishlist < 2.2.0 - Authenticated SQL Injection
Slug
yith-woocommerce-wishlist
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-wishlist
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-wishlist
Published
2024-05-30
Title
YITH WooCommerce Wishlist < 3.33.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
yith-woocommerce-wishlist
Published
2025-06-13
Title
YITH WooCommerce Wishlist < 4.6.0 - Contributor+ Stored XSS via id Parameter
Slug
yith-woocommerce-wishlist
Published
2025-11-18
Title
YITH WooCommerce Wishlist < 4.10.1 - Unauthenticated Wishlist Rename via IDOR
Slug
yith-woocommerce-wishlist
Published
2025-11-18
Title
YITH WooCommerce Wishlist < 4.10.1 - Wishlist Item Deletion via Wishlist Token Disclosure
Slug
yith-woocommerce-zoom-magnifier
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
ymc-smart-filter
Published
2024-06-27
Title
Filter & Grids < 2.8.33 - Unauthenticated LFI
Slug
ymc-smart-filter
Published
2024-08-01
Title
Filter & Grids < 2.8.34 - Cross-Site Request Forgery
Slug
ymc-smart-filter
Published
2024-08-01
Title
Filter & Grids < 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode