YITH vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20221
3. 20231
4. 20243
5. 202615

Newest CVEs

• CVE-2026-27401

  WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability

  YITH · YITH PayPal Express Checkout for WooCommerce

  Medium5.3
• CVE-2026-111845

  WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

  YITH · YITH WooCommerce Product Bundles

  Medium5.3
• CVE-2026-112199

  WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability

  YITH · YITH WooCommerce Wishlist

  Medium6.5
• CVE-2026-111409

  WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability

  YITH · YITH PayPal Express Checkout for WooCommerce

  Medium5.3
• CVE-2026-106604

  WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability

  YITH · YITH WooCommerce Compare

  Medium6.5
• CVE-2026-66480

  WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability

  YITH · YITH WooCommerce Product Add-Ons

  Medium5.3
• CVE-2026-106606

  WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

  YITH · YITH WooCommerce Affiliates

  High7.2
• CVE-2026-105878

  WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

  YITH · YITH WooCommerce Product Bundles

  Medium5.3
• CVE-2026-95602

  WordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerability

  YITH · YITH WooCommerce Request A Quote

  Medium6.5
• CVE-2026-14359

  YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user

  Yith · YITH WooCommerce Waitlist Premium

  High8.8