What’s Vulnerable › Vulnerabilities

CVE-2019-16251

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-31 · updated 2026-06-17

Description

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.

Affected products

• YITHEMES Yith Advanced Refund System For Woocommerce: through 1.0.10
• YITHEMES Yith Color And Label Variations For Woocommerce: through 1.8.11
• YITHEMES Yith Custom Thank You Page For Woocommerce: through 1.1.6
• YITHEMES Yith Desktop Notifications For Woocommerce: through 1.2.7
• YITH PayPal Express Checkout for WooCommerce: through 1.2.5
• YITHEMES Yith Pre-Order For Woocommerce: through 1.1.9
• YITHEMES Yith Product Size Charts For Woocommerce: through 1.1.1
• YITHEMES Yith Woocommerce Added To Cart Popup: through 1.3.11
• YITHEMES Yith Woocommerce Advanced Reviews: through 1.3.9
• YITH WooCommerce Affiliates: through 1.6.3
• YITHEMES YITH WooCommerce Ajax Search: through 1.6.9
• YITHEMES Yith Woocommerce Authorize.Net Payment Gateway: through 1.1.12
• YITHEMES Yith Woocommerce Badge Management: through 1.3.19
• YITHEMES Yith Woocommerce Best Sellers: through 1.1.11
• YITHEMES Yith Woocommerce Brands Add-On: through 1.3.6
• YITHEMES Yith Woocommerce Bulk Product Editing: through 1.2.13
• YITHEMES Yith Woocommerce Cart Messages: through 1.4.3
• YITHEMES YITH WooCommerce Compare: through 2.3.13
• YITHEMES Yith Woocommerce Frequently Bought Together: through 1.2.10
• YITH WooCommerce Gift Cards: through 1.3.7
• YITHEMES Yith Woocommerce Mailchimp: through 2.1.3
• YITHEMES Yith Woocommerce Multi-Step Checkout: through 1.7.4
• YITHEMES Yith Woocommerce Multi Vendor: through 3.4.0
• YITHEMES Yith Woocommerce Order Tracking: through 1.2.10
• YITHEMES Yith Woocommerce Pdf Invoice And Shipping List: through 1.2.12
• YITHEMES Yith Woocommerce Points And Rewards: through 1.3.4
• YITHEMES YITH WooCommerce Product Add-Ons: through 1.5.21
• YITH WooCommerce Product Bundles: through 1.1.15
• YITHEMES Yith Woocommerce Questions And Answers: through 1.1.9
• yithemes YITH WooCommerce Quick View: through 1.3.13

References

• https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-yit-plugin-framework/
• https://wpvulndb.com/vulnerabilities/9932
• https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-yit-plugin-framework/
• https://wpvulndb.com/vulnerabilities/9932

Get alerted when CVE-2019-16251 or the next vulnerability affects your stack