WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yith-woocommerce-product-add-ons
Published
2024-10-24
Title
YITH WooCommerce Product Add-Ons < 4.14.2 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-product-add-ons
Published
2026-05-20
Title
YITH WooCommerce Product Add-Ons < 4.29.1 - Authenticated (Shop manager+) SQL Injection
Slug
yith-woocommerce-product-add-ons
Published
2026-10-08
Title
YITH WooCommerce Product Add-Ons < 4.34.1 - Unauthenticated Information Exposure
Slug
yith-woocommerce-product-add-ons
Published
2026-10-30
Title
YITH WooCommerce Product Add-Ons < 4.34.1 - Unauthenticated Non-Public Product Data Disclosure
Slug
yith-woocommerce-product-bundles
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-product-bundles
Published
2026-10-08
Title
YITH WooCommerce Product Bundles < 2.30.0 - Missing Authorization
Slug
yith-woocommerce-product-bundles
Published
2026-10-19
Title
YITH WooCommerce Product Bundles < 2.30.0 - Missing Authorization
Slug
yith-woocommerce-product-vendors
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-product-vendors
Published
2021-10-11
Title
YITH WooCommerce Multi Vendor < 3.8.1 - Reflected Cross-Site Scripting
Slug
yith-woocommerce-questions-and-answers
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-quick-view
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-quick-view
Published
2022-12-05
Title
Multiple YITH WooCommerce plugins - Cross-Site Scripting via shortcode ajax
Slug
yith-woocommerce-quick-view
Published
2025-12-12
Title
YITH WooCommerce Quick View < 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode
Slug
yith-woocommerce-recover-abandoned-cart
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-request-a-quote
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-request-a-quote
Published
2021-06-30
Title
YITH Request a Quote for WooCommerce < 1.6.4 - Unauthorised AJAX call via CSRF
Slug
yith-woocommerce-request-a-quote
Published
2026-01-09
Title
YITH WooCommerce Request A Quote < 2.46.1 - Missing Authorization
Slug
yith-woocommerce-request-a-quote
Published
2026-09-23
Title
YITH Request a Quote for WooCommerce < 4.46.1 - Unauthenticated Insecure Direct Object Reference
Slug
yith-woocommerce-request-a-quote-premium
Published
2026-09-02
Title
YITH Request a Quote for WooCommerce Premium < 4.46.0 - Missing Authorization
Slug
yith-woocommerce-social-login
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-stripe
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-subscription
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update
Slug
yith-woocommerce-tab-manager
Published
2024-06-06
Title
YITH WooCommerce Tab Manager < 1.35.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
yith-woocommerce-tab-manager
Published
2026-09-28
Title
YITH WooCommerce Tab Manager < 2.15.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
yith-woocommerce-waiting-list
Published
2019-10-31
Title
YIT Plugin Framework < 3.3.13 - Subscriber+ Settings Update