Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Yith Woocommerce Product Add Ons - Security Vulnerability (CVE-2026-107868)
Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons
CVE-2026-107868
Yith Woocommerce Product Add Ons - Security Vulnerability (CVE-2026-66480)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0.
CVE-2026-66480
Yith Woocommerce Product Add Ons - SQL Injection (CVE-2026-42383)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.
CVE-2026-42383
Yith Woocommerce Product Add Ons - Broken Access Control (CVE-2023-46635)
Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Add-Ons: from n/a through
CVE-2023-46635
Yith Woocommerce Product Add Ons - Cross-Site Scripting (XSS) (CVE-2024-50448)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through
CVE-2024-50448
Yith Woocommerce Product Add Ons - Cross-Site Scripting (XSS) (CVE-2024-47367)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through
CVE-2024-47367
Yith Woocommerce Product Add Ons - Cross-Site Scripting (XSS) (CVE-2024-35680)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through
CVE-2024-35680
Yith Woocommerce Product Add Ons - Cross-Site Scripting (XSS) (CVE-2024-27994)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through
CVE-2024-27994
Yith Woocommerce Product Add Ons - PHP Object Injection (CVE-2023-49777)
Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0.
CVE-2023-49777
Yith Woocommerce Product Add Ons - Security Vulnerability (CVE-2019-16251)
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
CVE-2019-16251