Advisories · Technology

YITH WooCommerce Product Add-Ons.

Every CVE that names YITH WooCommerce Product Add-Ons among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66480 CVE record

CVSS 5.3 Medium

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability
- YITH WooCommerce Product Add-Ons
- Information disclosure
Not analysed yet 10 Oct 2026
CVE-2026-42383 CVE record

CVSS 7.6 High

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability
- YITH WooCommerce Product Add-Ons
- SQL injection
Not analysed yet 20 May 2026
CVE-2023-49777 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection
- YITH WooCommerce Product Add-Ons
- Insecure deserialization
Not analysed yet 31 Dec 2023