WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yith-woocommerce-request-a-quote
Published
2026-01-09
Title
YITH WooCommerce Request A Quote < 2.46.1 - Missing Authorization
Slug
yith-woocommerce-request-a-quote-premium
Published
2026-09-02
Title
YITH Request a Quote for WooCommerce Premium < 4.46.0 - Missing Authorization
Slug
yith-woocommerce-social-login
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-stripe
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-subscription
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-tab-manager
Published
2024-06-06
Title
YITH WooCommerce Tab Manager < 1.35.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
yith-woocommerce-waiting-list
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-wishlist
Published
2018-01-16
Title
YITH WooCommerce Wishlist < 2.2.0 - Authenticated SQL Injection
Slug
yith-woocommerce-wishlist
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-wishlist
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-wishlist
Published
2024-05-30
Title
YITH WooCommerce Wishlist < 3.33.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
yith-woocommerce-wishlist
Published
2025-06-13
Title
YITH WooCommerce Wishlist < 4.6.0 - Contributor+ Stored XSS via id Parameter
Slug
yith-woocommerce-wishlist
Published
2025-11-18
Title
YITH WooCommerce Wishlist < 4.10.1 - Unauthenticated Wishlist Rename via IDOR
Slug
yith-woocommerce-wishlist
Published
2025-11-18
Title
YITH WooCommerce Wishlist < 4.10.1 - Wishlist Item Deletion via Wishlist Token Disclosure
Slug
yith-woocommerce-wishlist
Published
2026-03-20
Title
YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR
Slug
yith-woocommerce-zoom-magnifier
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-zoom-magnifier
Published
2026-08-05
Title
YITH WooCommerce Zoom Magnifier < 2.52.1 - Unauthenticated Information Exposure
Slug
ymc-smart-filter
Published
2024-06-27
Title
Filter & Grids < 2.8.33 - Unauthenticated LFI
Slug
ymc-smart-filter
Published
2024-08-01
Title
Filter & Grids < 2.8.34 - Cross-Site Request Forgery
Slug
ymc-smart-filter
Published
2024-08-01
Title
Filter & Grids < 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ymc-smart-filter
Published
2025-12-12
Title
Filter & Grids < 3.2.1 - Unauthenticated SQL Injection
Slug
ymc-smart-filter
Published
2026-02-20
Title
Filter & Grids < 3.5.2 - Missing Authorization
Slug
ymc-smart-filter
Published
2026-06-18
Title
YMC Filter < 3.11.6 - Unauthenticated SQL Injection
Slug
ymc-smart-filter
Published
2026-06-05
Title
YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure
Slug
ymc-smart-filter
Published
2026-08-03
Title
YMC Filter < 3.12.8 - Contributor+ Stored XSS via Layout Builder Schema