WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yith-woocommerce-compare
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-compare
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-compare
Published
2024-04-22
Title
YITH WooCommerce Compare < 2.38.0 - Cross-Site Request Forgery
Slug
yith-woocommerce-frequently-bought-together
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-gift-cards
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-gift-cards
Published
2024-05-13
Title
YITH WooCommerce Gift Cards < 4.13.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update
Slug
yith-woocommerce-gift-cards-premium
Published
2021-02-23
Title
YITH WooCommerce Gift Cards Premium < 3.3.1 - RCE via Arbitrary File Upload
Slug
yith-woocommerce-gift-cards-premium
Published
2022-12-06
Title
YITH WooCommerce Gift Cards < 3.20.0 - Unauthenticated Arbitrary File Upload
Slug
yith-woocommerce-mailchimp
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-multi-step-checkout
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-order-tracking
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-order-tracking
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-pdf-invoice
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-points-and-rewards
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-popup
Published
2025-07-30
Title
YITH WooCommerce Popup < 1.48.1 - Cross-Site Request Forgery
Slug
yith-woocommerce-product-add-ons
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-product-add-ons
Published
2021-09-20
Title
YITH WooCommerce Product Add-Ons < 2.1.0 - Authenticated Local File Inclusion
Slug
yith-woocommerce-product-add-ons
Published
2021-09-20
Title
YITH WooCommerce Product Add-Ons < 2.1.0 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-product-add-ons
Published
2023-10-25
Title
YITH WooCommerce Product Add-Ons < 4.2.1 - Missing Authorization
Slug
yith-woocommerce-product-add-ons
Published
2023-12-28
Title
YITH WooCommerce Product Add-Ons < 4.3.1 - Authenticated(Shop Manager+) PHP Object Injection
Slug
yith-woocommerce-product-add-ons
Published
2024-03-15
Title
YITH WooCommerce Product Add-Ons < 4.6.0 - Unuathenticated Cross-Site Scripting
Slug
yith-woocommerce-product-add-ons
Published
2024-06-06
Title
YITH WooCommerce Product Add-Ons < 4.9.3 - Unauthenticated Content Injection
Slug
yith-woocommerce-product-add-ons
Published
2024-09-30
Title
YITH WooCommerce Product Add-Ons < 4.13.1 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-product-add-ons
Published
2024-10-24
Title
YITH WooCommerce Product Add-Ons < 4.14.2 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-product-bundles
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update