CVE Intelligence

YITH YITH WooCommerce Product Add-Ons vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting YITH YITH WooCommerce Product Add-Ons: 2 record(s), with affected versions and fixes.

CVE-2026-66480 Medium · 5.3 CWE-497 Oct 10, 2026
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0.
CVE-2026-42383 High · 7.6 CWE-89 May 20, 2026
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.