YITHEMES vulnerabilities

CVEs per yearBy the year they were published

1. 202414
2. 20258
3. 20266

Newest CVEs

• CVE-2026-107868

  WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability

  YITHEMES · YITH WooCommerce Product Add-Ons

  Medium5.3
• CVE-2026-97292

  WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability

  YITHEMES · YITH WooCommerce Tab Manager

  Medium6.5
• CVE-2026-96352

  WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability

  YITHEMES · YITH WooCommerce Ajax Search

  High7.1
• CVE-2026-28169

  WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability

  YITHEMES · YITH WooCommerce Zoom Magnifier

  Medium5.3
• CVE-2026-22333

  WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability

  YITHEMES · YITH WooCommerce Compare

  High7.2
• CVE-2026-24366

  WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability

  YITHEMES · YITH WooCommerce Request A Quote

  Medium5.3
• CVE-2025-68581

  WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability

  YITHEMES · YITH Slider for page builders

  Medium5.4
• CVE-2025-8617

  YITH WooCommerce Quick View <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode

  yithemes · YITH WooCommerce Quick View

  Medium6.4
• CVE-2025-12427

  YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename

  yithemes · YITH WooCommerce Wishlist

  Medium5.3
• CVE-2025-12777

  YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion

  yithemes · YITH WooCommerce Wishlist

  Medium5.3