What’s Vulnerable › Products

YITHEMES YITH WooCommerce Product Add-Ons vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your YITHEMES YITH WooCommerce Product Add-Ons version is affected

Latest YITHEMES YITH WooCommerce Product Add-Ons vulnerabilities

• CVE-2026-107868 — WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Bypass Vulnerability vulnerability (CVSS 5.3)
• CVE-2026-66480 — WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2026-42383 — WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2023-46635 — WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2024-50448 — WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-47367 — WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-35680 — WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability (CVSS 5.3)
• CVE-2024-27994 — WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2023-49777 — WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection (CVSS 8.8)
• CVE-2019-16251 — (CVSS 4.3)