WordPress Plugin Vulnerabilities

YITH WooCommerce Compare < 2.1.0 - Unauthenticated PHP Object injection

Description

The YITH WooCommerce Compare WordPress plugin was affected by an Unauthenticated PHP Object injection security vulnerability.

Affects Plugins

Plugin icon
yith-woocommerce-compare
Fixed in 2.1.0

References

URL
https://sumofpwn.nl/advisory/2016/yith_woocommerce_compare_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html

Classification

Type
OBJECT INJECTION
OWASP top 10
A8: Insecure Deserialization
CWE
CWE-502

Miscellaneous

Submitter
firefart
Submitter website
https://firefart.at/
Submitter twitter
_FireFart_
Verified
No
WPVDB ID
9d2d71ca-aea4-4b37-8e0a-3802f270d0cc

Timeline

Publicly Published
2016-11-08 (about 9 years ago)
Added
2016-11-08 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2023-12-05
Title
Genesis Simple Love <= 2.0 - Unauthenticated PHP Object Injection
Published
2024-03-05
Title
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget < 1.6.8 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup
Published
2025-06-23
Title
WP Optimize By xTraffic <= 5.1.6 - Unauthenticated PHP Object Injection
Published
2025-10-10
Title
Noisa < 2.6.3 - Unauthenticated PHP Object Injection
Published
2024-11-18
Title
Geolocator <= 1.1 - Unauthenticated PHP Object Injection