Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

yithemes / yith_woocommerce_product_add-ons CVEs

Beta · best-effort

4 CVEs tagged to yithemes / yith_woocommerce_product_add-ons — 1 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to yithemes vendor archive

CVE-2024-50448

Published Oct 28, 2024

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.Th…

CVSS 7.1 · High
Vendor/product tagsBeta · best-effort

CVE-2024-35680

Published Jun 10, 2024

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issu…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-49777

Published Dec 31, 2023

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0.

CVSS 9.1 · Critical
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2019-16251

Published Oct 31, 2019

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-4 of 4 CVEsPage 1 of 1