WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yith-woocommerce-product-add-ons
Published
2023-12-28
Title
YITH WooCommerce Product Add-Ons < 4.3.1 - Authenticated(Shop Manager+) PHP Object Injection
Slug
yith-woocommerce-product-add-ons
Published
2024-03-15
Title
YITH WooCommerce Product Add-Ons < 4.6.0 - Unuathenticated Cross-Site Scripting
Slug
yith-woocommerce-product-add-ons
Published
2024-06-06
Title
YITH WooCommerce Product Add-Ons < 4.9.3 - Unauthenticated Content Injection
Slug
yith-woocommerce-product-add-ons
Published
2024-09-30
Title
YITH WooCommerce Product Add-Ons < 4.13.1 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-product-add-ons
Published
2024-10-24
Title
YITH WooCommerce Product Add-Ons < 4.14.2 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-product-bundles
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-product-vendors
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-product-vendors
Published
2021-10-11
Title
YITH WooCommerce Multi Vendor < 3.8.1 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-questions-and-answers
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-quick-view
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-quick-view
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-quick-view
Published
2025-12-12
Title
YITH WooCommerce Quick View < 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode
Slug
yith-woocommerce-recover-abandoned-cart
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-request-a-quote
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-request-a-quote
Published
2021-06-30
Title
YITH Request a Quote for WooCommerce < 1.6.4 - Unauthorised AJAX call via CSRF
Slug
yith-woocommerce-request-a-quote
Published
2026-01-09
Title
YITH WooCommerce Request A Quote < 2.46.1 - Missing Authorization
Slug
yith-woocommerce-social-login
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-stripe
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-subscription
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-tab-manager
Published
2024-06-06
Title
YITH WooCommerce Tab Manager < 1.35.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
yith-woocommerce-waiting-list
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-wishlist
Published
2018-01-16
Title
YITH WooCommerce Wishlist < 2.2.0 - Authenticated SQL Injection
Slug
yith-woocommerce-wishlist
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-wishlist
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-wishlist
Published
2024-05-30
Title
YITH WooCommerce Wishlist < 3.33.0 - Authenticated (Admin+) Stored Cross-Site Scripting